13 technologies5 categories
metrobankonline.co.uk is built on Optimizely Content Management with Google Tag Manager and Azure Monitor.
The frontend relies on Microsoft ASP.NET. Analytics are handled by Google Tag Manager and Azure Monitor. Infrastructure includes Cloudflare and Azure.
Tech Stack Highlights
Core Platform1
Optimizely Content Management
CMS
100%
2 evidence signals
Header
\.episerver\.net: worker-src data: 'self' *.browsealoud.com *.episerver.net *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.onetrust.com *.whisbi.com gap: ws:; connect-src data: 'self' *.browsealoud.com *.code.createjs.com *.episerver.net *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com gap: http://www.google.com/ccm/ https://dc.services.visualstudio.com/v2/track https://googleads.g.doubleclick.net https://px.ads.linkedin.com/ js-agent.newrelic.com js.monitor.azure.com ws:; img-src data: 'self' *.amazonaws.com *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.hotjar.com *.linkedin.com *.onetrust.com *.whisbi.com gap: https://ad.doubleclick.net/ https://csi.gstatic.com https://px.ads.linkedin.com/ https://ssl.gstatic.com/ https://www.googletagmanager.com; font-src data: 'self' *.gstatic.com *.hotjar.com *.onetrust.com; default-src 'self' *.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.analytics.google.com *.browsealoud.com *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com https://ad.doubleclick.net https://ade.googlesyndication.com https://az416426.vo.msecnd.net https://code.createjs.com https://code.jquery.com https://dl.episerver.net https://googleads.g.doubleclick.net https://js-agent.newrelic.com/ https://snap.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://tagmanager.google.com/ https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.hotjar.com *.onetrust.com *.whisbi.com hello.myfonts.net https://fonts.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/; form-action 'self' https://www.facebook.com; object-src 'self'; media-src 'self'; frame-src 'self' *.facebook.net *.hotjar.com *.whisbi.com https://12801504.fls.doubleclick.net/ https://irs.tools.investis.com https://metrobankdigital.invisionapp.com https://metrobankonline.marketing.dynamics.com/ https://otp.tools.investis.com https://player.vimeo.com https://secure.flife.de https://static.hotjar.com https://td.doubleclick.net/ https://vars.hotjar.com/ https://www.appdemostore.com https://www.facebook.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.youtube.com https://app.ask-silver.com/host/iframe/metrobank?background=transparentScript
https://dl.episerver.net/13.6.1/epi-util/find.jsFrameworks & Languages1
Microsoft ASP.NET
Web frameworks
75%
1 evidence signal
Cookie
ASP.NET_SessionIdAnalytics & Marketing4
Google Tag Manager
Tag managers
100%
3 evidence signals
HTML
googletagmanager.com/gtm.jsJS Global
google_tag_manager โ objectJS Global
dataLayer โ objectAzure Monitor
Analytics
100%
2 evidence signals
Header
js\.monitor\.azure\.com: worker-src data: 'self' *.browsealoud.com *.episerver.net *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.onetrust.com *.whisbi.com gap: ws:; connect-src data: 'self' *.browsealoud.com *.code.createjs.com *.episerver.net *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com gap: http://www.google.com/ccm/ https://dc.services.visualstudio.com/v2/track https://googleads.g.doubleclick.net https://px.ads.linkedin.com/ js-agent.newrelic.com js.monitor.azure.com ws:; img-src data: 'self' *.amazonaws.com *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.hotjar.com *.linkedin.com *.onetrust.com *.whisbi.com gap: https://ad.doubleclick.net/ https://csi.gstatic.com https://px.ads.linkedin.com/ https://ssl.gstatic.com/ https://www.googletagmanager.com; font-src data: 'self' *.gstatic.com *.hotjar.com *.onetrust.com; default-src 'self' *.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.analytics.google.com *.browsealoud.com *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com https://ad.doubleclick.net https://ade.googlesyndication.com https://az416426.vo.msecnd.net https://code.createjs.com https://code.jquery.com https://dl.episerver.net https://googleads.g.doubleclick.net https://js-agent.newrelic.com/ https://snap.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://tagmanager.google.com/ https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.hotjar.com *.onetrust.com *.whisbi.com hello.myfonts.net https://fonts.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/; form-action 'self' https://www.facebook.com; object-src 'self'; media-src 'self'; frame-src 'self' *.facebook.net *.hotjar.com *.whisbi.com https://12801504.fls.doubleclick.net/ https://irs.tools.investis.com https://metrobankdigital.invisionapp.com https://metrobankonline.marketing.dynamics.com/ https://otp.tools.investis.com https://player.vimeo.com https://secure.flife.de https://static.hotjar.com https://td.doubleclick.net/ https://vars.hotjar.com/ https://www.appdemostore.com https://www.facebook.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.youtube.com https://app.ask-silver.com/host/iframe/metrobank?background=transparentScript
https://js.monitor.azure.com/scripts/a/ai.0.jsM
Microsoft 365
Email
100%
1 evidence signal
dns
MX: metrobankonline-co-uk.mail.protection.outlook.comLinkedin Ads
Advertising
75%
1 evidence signal
Header
px\.ads\.linkedin\.com: worker-src data: 'self' *.browsealoud.com *.episerver.net *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.onetrust.com *.whisbi.com gap: ws:; connect-src data: 'self' *.browsealoud.com *.code.createjs.com *.episerver.net *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com gap: http://www.google.com/ccm/ https://dc.services.visualstudio.com/v2/track https://googleads.g.doubleclick.net https://px.ads.linkedin.com/ js-agent.newrelic.com js.monitor.azure.com ws:; img-src data: 'self' *.amazonaws.com *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.hotjar.com *.linkedin.com *.onetrust.com *.whisbi.com gap: https://ad.doubleclick.net/ https://csi.gstatic.com https://px.ads.linkedin.com/ https://ssl.gstatic.com/ https://www.googletagmanager.com; font-src data: 'self' *.gstatic.com *.hotjar.com *.onetrust.com; default-src 'self' *.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.analytics.google.com *.browsealoud.com *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com https://ad.doubleclick.net https://ade.googlesyndication.com https://az416426.vo.msecnd.net https://code.createjs.com https://code.jquery.com https://dl.episerver.net https://googleads.g.doubleclick.net https://js-agent.newrelic.com/ https://snap.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://tagmanager.google.com/ https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.hotjar.com *.onetrust.com *.whisbi.com hello.myfonts.net https://fonts.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/; form-action 'self' https://www.facebook.com; object-src 'self'; media-src 'self'; frame-src 'self' *.facebook.net *.hotjar.com *.whisbi.com https://12801504.fls.doubleclick.net/ https://irs.tools.investis.com https://metrobankdigital.invisionapp.com https://metrobankonline.marketing.dynamics.com/ https://otp.tools.investis.com https://player.vimeo.com https://secure.flife.de https://static.hotjar.com https://td.doubleclick.net/ https://vars.hotjar.com/ https://www.appdemostore.com https://www.facebook.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.youtube.com https://app.ask-silver.com/host/iframe/metrobank?background=transparentInfrastructure & Security5
Imperva
Security
100%
4 evidence signals
Header
54-245900979-245857818 pNNy RT(1773659945769 35) q(0 0 0 -1) r(2 2) U12Header
^Imperva: ImpervaScript
https://www.metrobankonline.co.uk/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=4&cb=1761191602dns
CNAME: i3f2r.x.incapdns.netCloudflare
CDN
75%
2 evidence signals
Header
9dd35c65ba855d00-LHRHeader
cloudflare: cloudflareOneTrust
Cookie compliance
75%
1 evidence signal
Script
https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.jsHSTS
Security
75%
1 evidence signal
Header
max-age=31536000Azure
PaaS
75%
1 evidence signal
Cookie
ARRAffinityLibraries & Utilities2
HTTP/3
Miscellaneous
75%
1 evidence signal
Header
h3: h3=":443"; ma=86400MyFonts
Font scripts
75%
1 evidence signal
Header
\.myfonts\.net: worker-src data: 'self' *.browsealoud.com *.episerver.net *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.onetrust.com *.whisbi.com gap: ws:; connect-src data: 'self' *.browsealoud.com *.code.createjs.com *.episerver.net *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com gap: http://www.google.com/ccm/ https://dc.services.visualstudio.com/v2/track https://googleads.g.doubleclick.net https://px.ads.linkedin.com/ js-agent.newrelic.com js.monitor.azure.com ws:; img-src data: 'self' *.amazonaws.com *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.hotjar.com *.linkedin.com *.onetrust.com *.whisbi.com gap: https://ad.doubleclick.net/ https://csi.gstatic.com https://px.ads.linkedin.com/ https://ssl.gstatic.com/ https://www.googletagmanager.com; font-src data: 'self' *.gstatic.com *.hotjar.com *.onetrust.com; default-src 'self' *.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.analytics.google.com *.browsealoud.com *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.nr-data.net *.onetrust.com *.whisbi.com *.youtube.com *.ytimg.com https://ad.doubleclick.net https://ade.googlesyndication.com https://az416426.vo.msecnd.net https://code.createjs.com https://code.jquery.com https://dl.episerver.net https://googleads.g.doubleclick.net https://js-agent.newrelic.com/ https://snap.licdn.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://tagmanager.google.com/ https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.hotjar.com *.onetrust.com *.whisbi.com hello.myfonts.net https://fonts.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/; form-action 'self' https://www.facebook.com; object-src 'self'; media-src 'self'; frame-src 'self' *.facebook.net *.hotjar.com *.whisbi.com https://12801504.fls.doubleclick.net/ https://irs.tools.investis.com https://metrobankdigital.invisionapp.com https://metrobankonline.marketing.dynamics.com/ https://otp.tools.investis.com https://player.vimeo.com https://secure.flife.de https://static.hotjar.com https://td.doubleclick.net/ https://vars.hotjar.com/ https://www.appdemostore.com https://www.facebook.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.youtube.com https://app.ask-silver.com/host/iframe/metrobank?background=transparent