10 technologies3 categories
ikea.us uses Cloudflare, OneTrust, and HSTS and 7 other technologies.
Infrastructure includes Cloudflare and Amazon S3.
Tech Stack Highlights
Analytics & Marketing1
Optimizely
A/B Testing
75%
1 evidence signal
JS Global
optimizely → objectInfrastructure & Security7
Cloudflare
CDN
100%
3 evidence signals
Header
a085c5e80c80148e-SJCHeader
cloudflare: cloudflareCookie
__cf_bmOneTrust
Cookie compliance
75%
3 evidence signals
Script
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsHSTS
Security
75%
1 evidence signal
Header
max-age=31536000; includeSubDomains
Amazon S3
CDN
75%
1 evidence signal
Header
s3[^ ]*amazonaws\.com: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.ikea.com v4.ai.ingka.ikea.net api.addressy.com google.com *.google.com *.gstatic.com translate.googleapis.com translate-pa.googleapis.com mapsresources-pa.googleapis.com www.youtube-nocookie.com www.youtube.com www.paypal.com blob: data: wss://web-api.ikea.com https://storage.googleapis.com/learnwithikeavideos/ *.cdtapps.com challenges.cloudflare.com *.cloudflareinsights.com *.ingka.com *.ctfassets.net *.ipex-insights.com ikeausacustomersupport.my.salesforce.com *.afterpay.com *.ingka.dev seal.digicert.com *.taskrabbit.com pro.ip-api.com api.everythinglocation.com bpi.briteverify.com *.adform.net insight.adsrvr.org js.adsrvr.org *.doubleclick.net *.facebook.com *.facebook.net www.googleadservices.com *.googlesyndication.com *.jivox.com cdn.pdst.fm *.pinterest.com s.pinimg.com api.pinpiaa.com survey.survicate.com surveys-static.survicate.com analytics.tiktok.com analytics-ipv6.tiktokw.us trkn.us *.yimg.com p.placed.com *.pulseinsights.com www.redditstatic.com pixel-config.reddit.com conversions-config.reddit.com *.cookielaw.org *.onetrust.com *.contentsquare.net app.contentsquare.com *.google-analytics.com www.googletagmanager.com *.optimizely.com sentry.io *.sentry.io *.avo.app oppwa.com *.oppwa.com mpsnare.iesnare.com *.iesnare.com wss://mpsnare.iesnare.com maps.googleapis.com places.googleapis.com fonts.googleapis.com www.googleapis.com *.bambuser.com firestore.googleapis.com liveshopping-widgets.firebaseapp.com *.syndeo.cx *.production.syndeo.cx wss://web.production.syndeo.cx icsp.ingka.ikea.com wss://icsp.ingka.ikea.com wss://web-api.ikea.com/cschatbot/ *.bing.com bat.bing.net *.breadpayments.com *.kmsmep.com kmsmep.s3.amazonaws.com *.comenity.net sasadseus2fmcprd02.blob.core.windows.net assets.adobedtm.com alliancefrictionless.112.2o7.net api.alldata.net collector-48219.us.tvsquared.com *.teads.tv player.seen.io *.rakuten.com *.linksynergy.com *.babylist.com campaigns.brame.io; img-src * blob: data:; frame-src *; frame-ancestors *.ikea.com *.ingka.com; object-src 'self'; font-src 'self' www.ikea.com blob: fonts.gstatic.com; report-uri https://csp.ikea.comCloudflare Bot Management
Security
75%
1 evidence signal
Cookie
__cf_bmCloudflare Turnstile
Security
75%
1 evidence signal
JS Global
turnstile → objectAmazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Amazon S3Libraries & Utilities2
core-js
JavaScript libraries
75%
1 evidence signal
JS Global
__core-js_shared__ → objectPayPal
Payment processors
75%
1 evidence signal
Header
\.paypal\.com: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.ikea.com v4.ai.ingka.ikea.net api.addressy.com google.com *.google.com *.gstatic.com translate.googleapis.com translate-pa.googleapis.com mapsresources-pa.googleapis.com www.youtube-nocookie.com www.youtube.com www.paypal.com blob: data: wss://web-api.ikea.com https://storage.googleapis.com/learnwithikeavideos/ *.cdtapps.com challenges.cloudflare.com *.cloudflareinsights.com *.ingka.com *.ctfassets.net *.ipex-insights.com ikeausacustomersupport.my.salesforce.com *.afterpay.com *.ingka.dev seal.digicert.com *.taskrabbit.com pro.ip-api.com api.everythinglocation.com bpi.briteverify.com *.adform.net insight.adsrvr.org js.adsrvr.org *.doubleclick.net *.facebook.com *.facebook.net www.googleadservices.com *.googlesyndication.com *.jivox.com cdn.pdst.fm *.pinterest.com s.pinimg.com api.pinpiaa.com survey.survicate.com surveys-static.survicate.com analytics.tiktok.com analytics-ipv6.tiktokw.us trkn.us *.yimg.com p.placed.com *.pulseinsights.com www.redditstatic.com pixel-config.reddit.com conversions-config.reddit.com *.cookielaw.org *.onetrust.com *.contentsquare.net app.contentsquare.com *.google-analytics.com www.googletagmanager.com *.optimizely.com sentry.io *.sentry.io *.avo.app oppwa.com *.oppwa.com mpsnare.iesnare.com *.iesnare.com wss://mpsnare.iesnare.com maps.googleapis.com places.googleapis.com fonts.googleapis.com www.googleapis.com *.bambuser.com firestore.googleapis.com liveshopping-widgets.firebaseapp.com *.syndeo.cx *.production.syndeo.cx wss://web.production.syndeo.cx icsp.ingka.ikea.com wss://icsp.ingka.ikea.com wss://web-api.ikea.com/cschatbot/ *.bing.com bat.bing.net *.breadpayments.com *.kmsmep.com kmsmep.s3.amazonaws.com *.comenity.net sasadseus2fmcprd02.blob.core.windows.net assets.adobedtm.com alliancefrictionless.112.2o7.net api.alldata.net collector-48219.us.tvsquared.com *.teads.tv player.seen.io *.rakuten.com *.linksynergy.com *.babylist.com campaigns.brame.io; img-src * blob: data:; frame-src *; frame-ancestors *.ikea.com *.ingka.com; object-src 'self'; font-src 'self' www.ikea.com blob: fonts.gstatic.com; report-uri https://csp.ikea.com