Anthem

anthem.com

Compare

https://anthem.com

Scanned Apr 15, 2026 · 23.5s

Your website score is

0/100
Critical

Grade

F0

Banner

No

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 64 user data leaks before consent on anthem.com, including Advertising Tracker, Akamai (Analytics Tracker), Adobe (Tracker Tracker) and 27 more.

Security Headers

4/6 present

Strict-Transport-Security

max-age=31536000 ; includeSubDomains

Content-Security-Policy

frame-ancestors 'self' *.anthem.com;

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

Not Detected

Google Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.

Post-Rejection Audit

Reject Button

Missing

Post-Rejection Fires

0 vendors

Consent Mode

Not Detected

GTM Load

Not detected

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

Consent Record Audit

Issues detected

Consent record stored after interaction

GDPR Art. 7(1)

No consent record written — cannot prove consent was given

No CMP consent cookie or localStorage entry was found after the consent interaction. GDPR requires controllers to demonstrate consent was given.

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

No way for users to withdraw consent found on page

No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.

Why this matters

Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.

Tracker categories detected

Advertising10 vendors
Analytics6 vendors
Marketing9 vendors
Security2
Functional4 vendors
Critical52
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at rum.hlx.page loaded before consent

Host: rum.hlx.pageFired: 600ms after load
Akamai (Analytics Tracker)
Akamai (Analytics Tracker)3 findings

s2.go-mpulse.net, c.go-mpulse.net, 684dd32d.akstat.io

Akamai (Analytics Tracker)
criticalNetworkAnalyticsAkamai (Analytics Tracker)

Akamai (analytics) loaded before consent

Host: s2.go-mpulse.netFired: 742ms after load
Akamai (Analytics Tracker)
criticalNetworkAnalyticsAkamai (Analytics Tracker)

Akamai (analytics) loaded before consent

Host: c.go-mpulse.netFired: 1872ms after load
Akamai (Analytics Tracker)
criticalNetworkAnalyticsAkamai (Analytics Tracker)

Akamai (analytics) loaded before consent

Host: 684dd32d.akstat.ioFired: 4696ms after load
Adobe (Tracker Tracker)
Adobe (Tracker Tracker)5 findings

dpm.demdex.net, wellpoint.demdex.net, cm.everesttech.net, adobedc.demdex.net, sync-tm.everesttech.net

Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: dpm.demdex.netFired: 1838ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: wellpoint.demdex.netFired: 2326ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: cm.everesttech.netFired: 2355ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: adobedc.demdex.netFired: 2355ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: sync-tm.everesttech.netFired: 3587ms after load
Adobe Analytics
Adobe Analytics3 findings

wellpoint.tt.omtrdc.net, s_ecid, AMCV_95CF659E533DE4C90A490D4D%40AdobeOrg

Adobe Analytics
criticalNetworkAnalyticsAdobe Analytics

Adobe Analytics (Adobe) loaded before consent: Adobe Analytics tracking endpoint

Host: wellpoint.tt.omtrdc.netFired: 2355ms after load
Adobe Analytics
criticalCookieMarketingAdobe Analytics

Adobe Analytics cookie "s_ecid" set before consent — This cookie is set by the customer's domain after the AMCV cookie is set by the client. The purpose of this cookie is to allow persistent ID tracking in the 1st-party state and is used as a reference ID if the AMCV cookie has expired.

Cookie: s_ecidDomain: .anthem.comRetention: 2 years
Adobe Analytics
criticalCookieAnalyticsAdobe Analytics

Adobe Analytics cookie "AMCV_95CF659E533DE4C90A490D4D%40AdobeOrg" set before consent

Cookie: AMCV_95CF659E533DE4C90A490D4D%40AdobeOrgDomain: .anthem.com
Infillion (Tracker Tracker)
criticalNetworkInfillion (Tracker Tracker)

Infillion (tracker) loaded before consent

Host: sync.mathtag.comFired: 2489ms after load
LiveRamp (Advertising Tracker)
criticalNetworkAdvertisingLiveRamp (Advertising Tracker)

LiveRamp (advertising) loaded before consent

Host: idsync.rlcdn.comFired: 2622ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: cm.g.doubleclick.netFired: 2719ms after load
The Trade Desk (Tracker Tracker)
criticalNetworkThe Trade Desk (Tracker Tracker)

The Trade Desk (tracker) loaded before consent

Host: match.adsrvr.orgFired: 2821ms after load
Medallia (Analytics Tracker)
criticalNetworkAnalyticsMedallia (Analytics Tracker)

Medallia (analytics) loaded before consent

Host: resources.digital-cloud-west.medallia.comFired: 2847ms after load
QuantumMetric (Analytics Tracker)
QuantumMetric (Analytics Tracker)2 findings

cdn.quantummetric.com, ingest.quantummetric.com

QuantumMetric (Analytics Tracker)
criticalNetworkAnalyticsQuantumMetric (Analytics Tracker)

QuantumMetric (analytics) loaded before consent

Host: cdn.quantummetric.comFired: 2895ms after load
QuantumMetric (Analytics Tracker)
criticalNetworkAnalyticsQuantumMetric (Analytics Tracker)

QuantumMetric (analytics) loaded before consent

Host: ingest.quantummetric.comFired: 3059ms after load
Bombora (Analytics Tracker)
criticalNetworkAnalyticsBombora (Analytics Tracker)

Bombora (analytics) loaded before consent

Host: ml314.comFired: 3068ms after load
Datonics (Advertising Tracker)
criticalNetworkAdvertisingDatonics (Advertising Tracker)

Datonics (advertising) loaded before consent

Host: fei.pro-market.netFired: 3176ms after load
comScore (Analytics Tracker)
criticalNetworkAnalyticscomScore (Analytics Tracker)

comScore (analytics) loaded before consent

Host: ads.scorecardresearch.comFired: 3383ms after load
PublicisGroupe (Tracker Tracker)
criticalNetworkPublicisGroupe (Tracker Tracker)

PublicisGroupe (tracker) loaded before consent

Host: sync.crwdcntrl.netFired: 3486ms after load
Magnite (Advertising Tracker)
Magnite (Advertising Tracker)2 findings

pixel.rubiconproject.com, sync.search.spotxchange.com

Magnite (Advertising Tracker)
criticalNetworkAdvertisingMagnite (Advertising Tracker)

Magnite (advertising) loaded before consent

Host: pixel.rubiconproject.comFired: 3697ms after load
Magnite (Advertising Tracker)
criticalNetworkAdvertisingMagnite (Advertising Tracker)

Magnite (advertising) loaded before consent

Host: sync.search.spotxchange.comFired: 4371ms after load
IndexExchange (Advertising Tracker)
criticalNetworkAdvertisingIndexExchange (Advertising Tracker)

IndexExchange (advertising) loaded before consent

Host: dsum-sec.casalemedia.comFired: 3792ms after load
Microsoft (Advertising Tracker)
criticalNetworkAdvertisingMicrosoft (Advertising Tracker)

Microsoft (advertising) loaded before consent

Host: ib.adnxs.comFired: 4041ms after load
OpenX (Tracker Tracker)
criticalNetworkOpenX (Tracker Tracker)

OpenX (tracker) loaded before consent

Host: us-u.openx.netFired: 4162ms after load
PubMatic (Advertising Tracker)
criticalNetworkAdvertisingPubMatic (Advertising Tracker)

PubMatic (advertising) loaded before consent

Host: image2.pubmatic.comFired: 4278ms after load
Dentsu (Advertising Tracker)
criticalNetworkAdvertisingDentsu (Advertising Tracker)

Dentsu (advertising) loaded before consent

Host: mid.rkdms.comFired: 4565ms after load
iBehavior (Advertising Tracker)
criticalNetworkAdvertisingiBehavior (Advertising Tracker)

iBehavior (advertising) loaded before consent

Host: global.ib-ibi.comFired: 4666ms after load
WPP (Advertising Tracker)
criticalNetworkAdvertisingWPP (Advertising Tracker)

WPP (advertising) loaded before consent

Host: ib.mookie1.comFired: 4815ms after load
Adobe Audience Manager
Adobe Audience Manager5 findings

demdex, AMCVS_95CF659E533DE4C90A490D4D%40AdobeOrg, mbox, dpm, dextp

Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "demdex" set before consent — Unique value with which Audience Manager can identify a user. Used, among others, for identification, segmentation, modeling and reporting purposes.

Cookie: demdexDomain: .demdex.netRetention: 180 days after last activity or 10 years when opting out
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "AMCVS_95CF659E533DE4C90A490D4D%40AdobeOrg" set before consent — The AMCVS cookie serves as a flag indicating that the session has been initialized. Its value is always 1 and discontinues when the session has ended.

Cookie: AMCVS_95CF659E533DE4C90A490D4D%40AdobeOrgDomain: .anthem.comRetention: Session
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "mbox" set before consent — Adobe Target uses cookies to give website operators the ability to test which online content and offers are more relevant to visitors.

Cookie: mboxDomain: .anthem.comRetention: 2 years
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "dpm" set before consent — DPM is an abbreviation for Data Provider Match. It tells internal, Adobe systems that a call from Audience Manager or the Adobe Experience Cloud ID Service is passing in customer data for synchronization or requesting an ID.

Cookie: dpmDomain: .dpm.demdex.netRetention: 180 days
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "dextp" set before consent — Registers the date plus time (timestamp) on which a data synchronization was last performed by the Audience Manager.

Cookie: dextpDomain: .demdex.netRetention: 180 days after last activity
Adobe Advertising
criticalCookieMarketingAdobe Advertising

Adobe Advertising cookie "everest_g_v2" set before consent — This cookie stores the browser and surfer ID.Created after a user initially clicks a client's ad, and used to map the current and subsequent clicks with other events on the client's website

Cookie: everest_g_v2Domain: .everesttech.netRetention: 2 years
Rapleaf2 findings

rlas3, pxrc

criticalCookieMarketingRapleaf

Rapleaf cookie "rlas3" set before consent — Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

Cookie: rlas3Domain: .rlcdn.comRetention: 1 year
criticalCookieMarketingRapleaf

Rapleaf cookie "pxrc" set before consent — This cookie registers non-personal data on the visitor. The information is used to optimize advertisement relevance.

Cookie: pxrcDomain: .rlcdn.comRetention: 2 months
Mediamath
criticalCookieMarketingMediamath

Mediamath cookie "uuid" set before consent — Collects data on the user's visits to the website, such as what pages have been loaded. The registered data is used for targeted ads.

Cookie: uuidDomain: .mathtag.comRetention: 1 year
DoubleClick/Google Marketing
criticalCookieMarketingDoubleClick/Google Marketing

DoubleClick/Google Marketing cookie "IDE" set before consent — This cookie is used for targeting, analyzing and optimisation of ad campaigns in DoubleClick/Google Marketing Suite

Cookie: IDEDomain: .doubleclick.netRetention: 2 years
Bing / Microsoft
Bing / Microsoft2 findings

MUID, MR

Bing / Microsoft
criticalCookieMarketingBing / Microsoft

Bing / Microsoft cookie "MUID" set before consent — Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.

Cookie: MUIDDomain: .bing.comRetention: 1 year
Bing / Microsoft
criticalCookieMarketingBing / Microsoft

Bing / Microsoft cookie "MR" set before consent — Used to collect information for analytics purposes.

Cookie: MRDomain: .c.bing.comRetention: 6 months
Casale Media3 findings

CMID, CMPS, CMPRO

criticalCookieMarketingCasale Media

Casale Media cookie "CMID" set before consent — Collects visitor data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

Cookie: CMIDDomain: .casalemedia.comRetention: 1 day
criticalCookieMarketingCasale Media

Casale Media cookie "CMPS" set before consent — Collects visitor data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads

Cookie: CMPSDomain: .casalemedia.comRetention: 1 day
criticalCookieMarketingCasale Media

Casale Media cookie "CMPRO" set before consent — Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement - This also allows the website to limit the number of times that the visitor is shown the same advertisement.

Cookie: CMPRODomain: .casalemedia.comRetention: 1 day
openx.net
criticalCookieMarketingopenx.net

openx.net cookie "i" set before consent — Registers user data, such as IP address, geographical location, websites visited and on which advertisements the user has clicked, with the aim of optimizing the display of advertisements based on user relocation on websites that use the same advertising network.

Cookie: iDomain: .openx.netRetention: 1 year
criticalNetwork

No consent banner detected — all cookies and tags fire without user consent

criticalConsent

No "reject all" option found — users cannot refuse non-essential cookies (ICO guidance requires this)

criticalConsent Record

No recognizable consent cookie or storage entry detected after interaction — GDPR Article 7(1) requires controllers to demonstrate consent was given (server-side storage cannot be verified)

criticalConsent Record

No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)

Warnings15
Analytics proxy
warningNetworkAnalytics proxy

Possible server-side tag proxy at smetrics.anthem.com — analytics data may be forwarded to third parties before consent. Browser scanning cannot verify downstream recipients; audit your GTM Server-side or CNAME configuration.

Host: smetrics.anthem.comFired: 2355ms after load
vendor logo
warningNetwork

Unknown third-party request to assets.adobedtm.com before consent

Host: assets.adobedtm.comFired: 601ms after load
vendor logo
warningNetwork

Unknown third-party request to www.facebook.com before consent

Host: www.facebook.comFired: 4471ms after load
warningStorage

localStorage key "_boomr_clss" written before consent

Key: _boomr_clssType: localStorageFired: 1059ms after load
warningStorage

localStorage key "dummy" written before consent

Key: dummyType: localStorageFired: 1424ms after load
warningStorage

localStorage key "__akfp_storage_test__" written before consent

Key: __akfp_storage_test__Type: localStorageFired: 1619ms after load
warningStorage

localStorage key "seo-data" written before consent

Key: seo-dataType: localStorageFired: 1684ms after load
warningStorage

localStorage key "seo-parsed-value" written before consent

Key: seo-parsed-valueType: localStorageFired: 1688ms after load
warningStorage

sessionStorage key "everGreenStatus" written before consent

Key: everGreenStatusType: sessionStorageFired: 1853ms after load
warningStorage

sessionStorage key "evergreenTfn" written before consent

Key: evergreenTfnType: sessionStorageFired: 1853ms after load
warningStorage

sessionStorage key "globalPhoneNum" written before consent

Key: globalPhoneNumType: sessionStorageFired: 1853ms after load
warningStorage

sessionStorage key "currentLob" written before consent

Key: currentLobType: sessionStorageFired: 1853ms after load
warningStorage

sessionStorage key "refID" written before consent

Key: refIDType: sessionStorageFired: 1853ms after load
warningStorage

sessionStorage key "defaultTfn" written before consent

Key: defaultTfnType: sessionStorageFired: 1853ms after load
warningStorage

sessionStorage key "evergreenAPIResponse" written before consent

Key: evergreenAPIResponseType: sessionStorageFired: 1854ms after load
Info10
Adobe (Cdn)
infoNetworkAdobe (Cdn)

Adobe (cdn) loaded before consent

Host: s7d1.scene7.comFired: 797ms after load
Microsoft (Cdn)
infoNetworkMicrosoft (Cdn)

Microsoft (cdn) loaded before consent

Host: c.bing.comFired: 2943ms after load
Akamai
infoCookieFunctionalAkamai

Akamai cookie "AKA_A2" set before consent — Used for Akamai's Advanced Acceleration feature, intended to improve web performance

Cookie: AKA_A2Domain: .anthem.comRetention: 1 hour or longer
Adobe Audience Manager
infoCookieFunctionalAdobe Audience Manager

Adobe Audience Manager cookie "at_check" set before consent — A simple test value used to determine if a visitor supports cookies. Set each time a visitor requests a page.

Cookie: at_checkDomain: .anthem.comRetention: session
infoCookieFunctionalTripadvisor

Tripadvisor cookie "RT" set before consent — This cookie is used to identify the visitor through an application. This allows the visitor to login to a website through their LinkedIn application for example.

Cookie: RTDomain: .anthem.comRetention: 399 days
infoStorageFunctionallocalStorage availability probe

localStorage availability probe (null) wrote "__storage_test__" to localStorage before consent

Key: __storage_test__Type: localStorageFired: 1982ms after load
infoCookieFunctional

Akamai bot management — necessary for site protection

Cookie: bm_svDomain: .anthem.com
infoCookieFunctional

Akamai bot management session — necessary for site protection

Cookie: ak_bmscDomain: .anthem.com
infoCookieFunctional

Akamai bot manager — necessary for site protection

Cookie: _abckDomain: .anthem.com
infoCookieFunctional

.NET session identifier — necessary for site operation

Cookie: ASP.NET_SessionIdDomain: global.ib-ibi.com

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan anthem.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com