curzon.com

1 evidence signal

HTMLdata-react

React Router

JavaScript frameworks

1 evidence signal

JS Global__reactRouterVersion → string

Analytics & Marketing10

Google Tag Manager

Tag managers

3 evidence signals

HTMLgoogletagmanager.com/gtm.js

JS Globalgoogle_tag_manager → object

JS GlobaldataLayer → object

Google Analytics

2 evidence signals

Cookie_ga

Scripthttps://www.googletagmanager.com/gtag/js?id=G-RB8C8MV6V0&cx=c&gtm=4e65k1

Facebook Pixelv2.9.325

2 evidence signals

Scripthttps://connect.facebook.net/en_US/fbevents.js

JS Global_fbq → function(v2.9.325)

MailChimp

Marketing automation

1 evidence signal

dnsDKIM selector: k2

Google Workspace

1 evidence signal

dnsMX: aspmx.l.google.com

SendGrid

Cloudflare Browser Insights

1 evidence signal

dnsDKIM selector: s1

Mandrill

95%

1 evidence signal

dnsSPF includes mandrillapp.com

1 evidence signal

Scripthttps://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447

TikTok Pixel

1 evidence signal

JS GlobalTiktokAnalyticsObject → string

Yieldify

Personalisation

1 evidence signal

Scripthttps://td.yieldify.com/yieldify/code.js?w_uuid=cc2be88a-ebbc-4c50-bd38-ee02e4d0eaa1&k=1&loca=https://www.curzon.com/

Infrastructure & Security5

Cloudflare

CDN

3 evidence signals

Headera00e4f3efd447ace-SJC

Headercloudflare: cloudflare

Cookie__cf_bm

Cloudflare DNS

PaaS

1 evidence signal

dnsNS: denver.ns.cloudflare.com

OneTrust

Cookie compliance

3 evidence signals

Scripthttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js

HSTS

Security

Cloudflare Bot Management

1 evidence signal

Headermax-age=0; preload

Security

1 evidence signal

Cookie__cf_bm

Libraries & Utilities4

HTTP/3

Miscellaneous

1 evidence signal

Headerh3: h3=":443"; ma=86400

core-js

JavaScript libraries

1 evidence signal

JS Global__core-js_shared__ → object

PayPal

Payment processors

1 evidence signal

Header

\.paypal\.com: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' d2g43ubxtnccwi.cloudfront.net *.site24x7rum.eu apps.euw2.pure.cloud *.apps.euw2.pure.cloud api.mypurecloud.ie *.api.mypurecloud.ie *.curzon.com *.movio.co *.google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com *.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.ccdc02.com *.kaptcha.com *.vista.co *.vistamanaged.services *.paypalobjects.com *.site24x7rum.com platform-api.sharethis.com buttons-config.sharethis.com count-server.sharethis.com *.onetrust.com https://cdn.cookielaw.org code.jquery.com connect.facebook.net *.ads-twitter.com *.twitter.com t.co td.yieldify.com t.co td.yieldify.com analytics.tiktok.com googleads.g.doubleclick.net custom.yieldify.com https://static.cloudflareinsights.com https://*.hotjar.com https://www.youtube.com https://s.ytimg.com https://try.abtasty.com https://edge.eu1.fullstory.com https://rs.eu1.fullstory.com *.visualwebsiteoptimizer.com app.vwo.com static.client.cardinaltrusted.com recaptcha.net; media-src blob: *.cloudfront.net *.vistamanaged.services film-cdn.moviexchange.com; style-src 'self' 'unsafe-inline' *.braintreegateway.com *.braintree-api.com *.googleapis.com *.vistamanaged.services fonts.gstatic.com *.curzon.com cdn.cookielaw.org https://*.hotjar.com https://try.abtasty.com *.visualwebsiteoptimizer.com app.vwo.com; font-src 'self' *.curzon.com *.googleapis.com fonts.gstatic.com *.yieldify-production.com data: https://*.hotjar.com; img-src data: 'unsafe-eval' blob: * 'self' https://editor-assets.abtasty.com https://rs.eu1.fullstory.com app.vwo.com *.visualwebsiteoptimizer.com useruploads.vwo.io; connect-src blob: * 'self' *.abtasty.com https://edge.eu1.fullstory.com https://rs.eu1.fullstory.com *.visualwebsiteoptimizer.com app.vwo.com cardinaltrusted.com; frame-src td.yieldify.com *.youtube.com https://www.google.com/ https://checkout.paypal.com/ https://www.paypal.com https://assets.braintreegateway.com/ https://c.paypal.com/ https://geo.cardinalcommerce.com https://secure5.arcot.com https://centinelapi.cardinalcommerce.com https://www.googletagmanager.com https://td.doubleclick.net * 'self' *.visualwebsiteoptimizer.com app.vwo.com *.fullstory.com; frame-ancestors 'self'; object-src 'self' *.braintreegateway.com; worker-src 'self' blob: *.braintreegateway.com; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pubcc95e73f745c721c0f782ebd392ede23&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aomnia%2Cenv%3Aproduction; report-to csp-violations;

MobXv6

JavaScript libraries