Geo-redirect detected
https://cnn.com redirected to https://edition.cnn.com/.
https://cnn.com
Scanned Apr 15, 2026 · 43.0s
Your website score is
Grade
BannerConsent Banner
Yes
Regulatory Compliance
Multi-regulation overview — click any regulation for details
Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.
Tag Leak detected 47 user data leaks before consent on cnn.com, including Optimizely, Bombora (Analytics Tracker), comScore (Analytics Tracker) and 8 more.
Security Headers
2/6 presentStrict-Transport-Security
Add HSTS header to enforce HTTPS connections and prevent downgrade attacks
Content-Security-Policy
default-src 'self' blob: https://*.cnn.com:* http://*.cnn.com:* *.cnn.io:* *.cnn.net:* *.turner.com:* *.turner.io:* *.ugdturner.com:* courageousstudio.com *.vgtf.net:*; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' blob: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: blob: *; media-src 'self' data: blob: *; font-src 'self' data: *; connect-src 'self' data: *; frame-ancestors 'self' https://*.cnn.com:* http://*.cnn.com https://*.cnn.io:* http://*.cnn.io:* *.turner.com:* courageousstudio.com;
X-Frame-Options
Add X-Frame-Options header to prevent clickjacking attacks
X-Content-Type-Options
nosniff
Referrer-Policy
Set a Referrer-Policy header to control how much referrer information is shared
Permissions-Policy
Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation
Google Consent Mode
Not DetectedGoogle Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.
Post-Rejection Audit
Reject Button
Found
Post-Rejection Fires
4 vendors
Consent Mode
Not Detected
GTM Load
Not detected
Consent Mode V2: Not Detected
Google Consent Mode was not detected on this site.
Vendors firing after rejection (4)
| Vendor | Category | Timing | URL |
|---|---|---|---|
| Google — Google Ads | advertising | 20330ms | pagead2.googlesyndication.com |
| Optimizely — Optimizely | analytics | 21753ms | cdn.optimizely.com |
| Quantcast — Quantcast | advertising | 22295ms | secure.quantserve.com |
| OneTrust — OneTrust | consent_management | 25597ms | cdn.cookielaw.org |
Consent Record Audit
PassConsent record stored after interaction
GDPR Art. 7(1)Found: OptanonConsent (OneTrust)
Record contains timestamp
Art. 7(1)Timestamp field detected
Record contains consent state
Art. 7(1)Accept/reject state detected
Record contains consent categories
Art. 7(1)Consent categories (analytics, marketing, etc.) not found in record
Consent withdrawal mechanism accessible
GDPR Art. 7(3)Cookie settings link / floating button found
Tracker categories detected
Critical26

Optimizely (Optimizely) loaded before consent: Optimizely experimentation and A/B testing
Bombora (Analytics Tracker)2 findingscdn.ml314.com, vi.ml314.com
cdn.ml314.com, vi.ml314.com
Bombora (analytics) loaded before consent
Bombora (analytics) loaded before consent
comScore (analytics) loaded before consent

Quantcast (Quantcast) loaded before consent: Quantcast audience measurement and advertising

Quantcast (advertising) loaded before consent
Google (Tracker Tracker)2 findingssecurepubads.g.doubleclick.net, pubads.g.doubleclick.net
securepubads.g.doubleclick.net, pubads.g.doubleclick.net
Google (tracker) loaded before consent
Google (tracker) loaded before consent
Piano (Advertising Tracker)4 findingscdn.cxense.com, p1cluster.cxense.com, comcluster.cxense.com, id.cxense.com

cdn.cxense.com, p1cluster.cxense.com, comcluster.cxense.com, id.cxense.com

Piano (advertising) loaded before consent

Piano (advertising) loaded before consent

Piano (advertising) loaded before consent

Piano (advertising) loaded before consent
Google Ads2 findingspagead2.googlesyndication.com, tpc.googlesyndication.com

pagead2.googlesyndication.com, tpc.googlesyndication.com

Google Ads (Google) loaded before consent: Google ad syndication and remarketing

Google Ads (Google) loaded before consent: Google ad syndication and remarketing
advertising tracker at events.brightline.tv loaded before consent
Mux (advertising) loaded before consent
Piano6 findings__pat, __pvi, _pcus, cX_P, gckp, cX_G

__pat, __pvi, _pcus, cX_P, gckp, cX_G

Piano cookie "__pat" set before consent — This cookie stores difference between the client’s application time zone and UTC. At midnight, (application's local time), the previous visit is expired and a new one is created. The cookie is used for calculation.

Piano cookie "__pvi" set before consent — This cookie stores data about the last visit to the site including the AID, lastTrackedVisitId, domain and time of the visit. Used for reporting only.

Piano cookie "_pcus" set before consent — This cookie is used to User segmentation

Piano cookie "cX_P" set before consent — This cookie contains the browserId that is used in Piano products for reporting and tracking purposes

Piano cookie "gckp" set before consent — This cookie is used for building user profile information across sites of a single customer where cx.js is implemented

Piano cookie "cX_G" set before consent — This cookie is a Global ID mapping different IDs together into one ID. Used for building user profile information across all sites of a single customer where cx.js is implemented

Google — Google Ads fires after user rejected consent

Optimizely — Optimizely fires after user rejected consent

Quantcast — Quantcast fires after user rejected consent

OneTrust — OneTrust fires after user rejected consent
Warnings25
Unknown third-party request to registry.api.cnn.io before consent
Unknown third-party request to accounts.google.com before consent
Unknown third-party request to fave.api.cnn.io before consent
Unknown third-party request to google.com before consent
Unknown third-party request to services.brightline.tv before consent
Unknown third-party request to gcp.live.cnn.eu.prd.media.max.com before consent
Unknown third-party request to gmss.euc1.prd.api.discomax.com before consent
sessionStorage key "_ucWBDConf" written before consent
sessionStorage key "_ucWBDCons" written before consent
localStorage key "__test_it" written before consent
localStorage key "iabToFwMappingkey" written before consent
localStorage key "_ml_temp_" written before consent
localStorage key "access_level" written before consent
localStorage key "uCgI2raDsb" written before consent
localStorage key "BOLT_DEVICE_ID" written before consent
localStorage key "boltAccessToken" written before consent
localStorage key "_cX_check" written before consent
sessionStorage key "__sak" written before consent
sessionStorage key "_cX_S" written before consent
localStorage key "_ls_ttl" written before consent
localStorage key "_cX_lastP1Time" written before consent
localStorage key "brightline" written before consent
localStorage key "CNNgoFreePreview" written before consent
localStorage key "_cX_atfr" written before consent
localStorage key "__tp-gaAccount" written before consent
Info16
Piano (Cdn)4 findingsexperience.piano.io, cdn.tinypass.com, c2.piano.io, buy.tinypass.com

experience.piano.io, cdn.tinypass.com, c2.piano.io, buy.tinypass.com

Piano (cdn) loaded before consent

Piano (cdn) loaded before consent

Piano (cdn) loaded before consent

Piano (cdn) loaded before consent
Volentio JSD (cdn) loaded before consent
Google (Cdn)3 findingsfonts.googleapis.com, fonts.gstatic.com, www.gstatic.com
fonts.googleapis.com, fonts.gstatic.com, www.gstatic.com
Google (cdn) loaded before consent
Google (cdn) loaded before consent
Google (cdn) loaded before consent
OneTrust3 findingscdn.cookielaw.org, OptanonControl, OptanonConsent

cdn.cookielaw.org, OptanonControl, OptanonConsent

OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management

OneTrust cookie "OptanonControl" set before consent — This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.

OneTrust cookie "OptanonConsent" set before consent
PrivacyPillar cookie "usprivacy" set before consent — This cookie stores the US privacy string.
Piano4 findings_pctx, _pcid, __tbc, xbc

_pctx, _pcid, __tbc, xbc

Piano cookie "_pctx" set before consent — This cookie is required to sync different Piano product scripts containing common data points. It contains data from different products, for example for Composer Insights or Ad Revenue Insights, but only IF you have implemented any of these products.

Piano cookie "_pcid" set before consent — This cookie contains the browserId (BID) that is used in Piano products for reporting and tracking purposes.

Piano cookie "__tbc" set before consent — This cookie is used for tracking conversion and external segmentation

Piano cookie "xbc" set before consent — This cookie is used by Multiple Composer features, used for, metering, A/B testing, adblocker conversion tracking, credits, affiliates, first-visit segmentation, and AMP reader ID linking.
Compliant88
Optimizely3 findingsa125375509.cdn.optimizely.com, logx.optimizely.com, optimizelyEndUserId

a125375509.cdn.optimizely.com, logx.optimizely.com, optimizelyEndUserId

Optimizely (Optimizely) loaded correctly after consent

Optimizely (Optimizely) loaded correctly after consent

Optimizely cookie "optimizelyEndUserId" set correctly after consent
Quantcast3 findingspixel.quantserve.com, mc, __qca

pixel.quantserve.com, mc, __qca

Quantcast (Quantcast) loaded correctly after consent

Quantcast cookie "mc" set correctly after consent

Quantcast cookie "__qca" set correctly after consent

Criteo cookie "cto_bundle" set correctly after consent

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent
Marfeel cookie "_scor_uid" set correctly after consent
PubMatic18 findingspi, KRTBCOOKIE_153, KADUSERCOOKIE, KRTBCOOKIE_452, PugT, KRTBCOOKIE_632, KRTBCOOKIE_860, KRTBCOOKIE_80, KRTBCOOKIE_57, KRTBCOOKIE_377, KRTBCOOKIE_391, KRTBCOOKIE_22, KRTBCOOKIE_699, DPSync4, SyncRTB4, SPugT, chkChromeAb67Sec, pubsyncexp
pi, KRTBCOOKIE_153, KADUSERCOOKIE, KRTBCOOKIE_452, PugT, KRTBCOOKIE_632, KRTBCOOKIE_860, KRTBCOOKIE_80, KRTBCOOKIE_57, KRTBCOOKIE_377, KRTBCOOKIE_391, KRTBCOOKIE_22, KRTBCOOKIE_699, DPSync4, SyncRTB4, SPugT, chkChromeAb67Sec, pubsyncexp
PubMatic cookie "pi" set correctly after consent
PubMatic cookie "KRTBCOOKIE_153" set correctly after consent
PubMatic cookie "KADUSERCOOKIE" set correctly after consent
PubMatic cookie "KRTBCOOKIE_452" set correctly after consent
PubMatic cookie "PugT" set correctly after consent
PubMatic cookie "KRTBCOOKIE_632" set correctly after consent
PubMatic cookie "KRTBCOOKIE_860" set correctly after consent
PubMatic cookie "KRTBCOOKIE_80" set correctly after consent
PubMatic cookie "KRTBCOOKIE_57" set correctly after consent
PubMatic cookie "KRTBCOOKIE_377" set correctly after consent
PubMatic cookie "KRTBCOOKIE_391" set correctly after consent
PubMatic cookie "KRTBCOOKIE_22" set correctly after consent
PubMatic cookie "KRTBCOOKIE_699" set correctly after consent
PubMatic cookie "DPSync4" set correctly after consent
PubMatic cookie "SyncRTB4" set correctly after consent
PubMatic cookie "SPugT" set correctly after consent
PubMatic cookie "chkChromeAb67Sec" set correctly after consent
PubMatic cookie "pubsyncexp" set correctly after consent
Bombora cookie "tp" set correctly after consent
Adform4 findingsUID, uid, C, c

UID, uid, C, c

Adform cookie "UID" set correctly after consent

Adform cookie "uid" set correctly after consent

Adform cookie "C" set correctly after consent

Adform cookie "c" set correctly after consent
ComScore cookie "XID" set correctly after consent
Magnite4 findingskhaos, khaos_p, audit_p, audit
khaos, khaos_p, audit_p, audit
Magnite cookie "khaos" set correctly after consent
Magnite cookie "khaos_p" set correctly after consent
Magnite cookie "audit_p" set correctly after consent
Magnite cookie "audit" set correctly after consent
Google cookie "receive-cookie-deprecation" set correctly after consent
Casale Media3 findingsCMID, CMPS, CMPRO
CMID, CMPS, CMPRO
Casale Media cookie "CMID" set correctly after consent
Casale Media cookie "CMPS" set correctly after consent
Casale Media cookie "CMPRO" set correctly after consent
openx.net2 findingsi, pd
i, pd
openx.net cookie "i" set correctly after consent
openx.net cookie "pd" set correctly after consent
DoubleClick/Google Marketing2 findings__gads, IDE

__gads, IDE

DoubleClick/Google Marketing cookie "__gads" set correctly after consent

DoubleClick/Google Marketing cookie "IDE" set correctly after consent
Google AdSense2 findings__gpi, __eoi

__gpi, __eoi

Google AdSense cookie "__gpi" set correctly after consent

Google AdSense cookie "__eoi" set correctly after consent
Nielsen cookie "IMRID" set correctly after consent
Snowplow3 findings_sp_ses.f5fb, sp, _sp_id.f5fb
_sp_ses.f5fb, sp, _sp_id.f5fb
Snowplow cookie "_sp_ses.f5fb" set correctly after consent
Snowplow cookie "sp" set correctly after consent
Snowplow cookie "_sp_id.f5fb" set correctly after consent
Adobe Audience Manager3 findingsdemdex, AMCVS_7FF852E2556756057F000101%40AdobeOrg, dpm

demdex, AMCVS_7FF852E2556756057F000101%40AdobeOrg, dpm

Adobe Audience Manager cookie "demdex" set correctly after consent

Adobe Audience Manager cookie "AMCVS_7FF852E2556756057F000101%40AdobeOrg" set correctly after consent

Adobe Audience Manager cookie "dpm" set correctly after consent
Chartbeat cookie "_chartbeat2" set correctly after consent
Adobe Analytics3 findingss_ecid, s_cc, AMCV_7FF852E2556756057F000101%40AdobeOrg

s_ecid, s_cc, AMCV_7FF852E2556756057F000101%40AdobeOrg

Adobe Analytics cookie "s_ecid" set correctly after consent

Adobe Analytics cookie "s_cc" set correctly after consent

Adobe Analytics cookie "AMCV_7FF852E2556756057F000101%40AdobeOrg" set correctly after consent
Xandr4 findingsXANDR_PANID, uuid2, anj, icu
XANDR_PANID, uuid2, anj, icu
Xandr cookie "XANDR_PANID" set correctly after consent
Xandr cookie "uuid2" set correctly after consent
Xandr cookie "anj" set correctly after consent
Xandr cookie "icu" set correctly after consent
Federated Media Publishing cookie "ljt_reader" set correctly after consent
Permutive cookie "permutive-id" set correctly after consent
Teads cookie "tt_viewer" set correctly after consent
The Tradedesk2 findingsTDID, TDCPM
TDID, TDCPM
The Tradedesk cookie "TDID" set correctly after consent
The Tradedesk cookie "TDCPM" set correctly after consent
ID52 findingsid5, 3pi
id5, 3pi
ID5 cookie "id5" set correctly after consent
ID5 cookie "3pi" set correctly after consent
GumGum cookie "vst" set correctly after consent
Yahoo2 findingsA3, IDSYNC
A3, IDSYNC
Yahoo cookie "A3" set correctly after consent
Yahoo cookie "IDSYNC" set correctly after consent
CreativeCDN cookie "g" set correctly after consent
PayPal cookie "ts" set correctly after consent
Amazon2 findingsad-privacy, ad-id
ad-privacy, ad-id
Amazon cookie "ad-privacy" set correctly after consent
Amazon cookie "ad-id" set correctly after consent
Beeswax2 findingsbitoIsSecure, bito
bitoIsSecure, bito
Beeswax cookie "bitoIsSecure" set correctly after consent
Beeswax cookie "bito" set correctly after consent

Adobe Advertising cookie "everest_g_v2" set correctly after consent
Platform161 cookie "tuuid" set correctly after consent
bidswitch.net cookie "tuuid_lu" set correctly after consent
Rapleaf2 findingsrlas3, pxrc
rlas3, pxrc
Rapleaf cookie "rlas3" set correctly after consent
Rapleaf cookie "pxrc" set correctly after consent
LinkedIn3 findingsbcookie, li_gc, lidc
bcookie, li_gc, lidc
LinkedIn cookie "bcookie" set correctly after consent
LinkedIn cookie "li_gc" set correctly after consent
LinkedIn cookie "lidc" set correctly after consent
1rx.io cookie "_rxuuid" set correctly after consent
Totvs cookie "u" set correctly after consent
Is this your site?
Run a full multi-page scan with monitoring and get detailed remediation steps
Scan cnn.com →This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com