E*TRADE

etrade.com

Compare

Geo-redirect detected

https://etrade.com redirected to https://us.etrade.com/home.

https://etrade.com

Scanned Apr 15, 2026 · 30.6s

Your website score is

0/100
Critical

Grade

F0

Banner

No

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 88 user data leaks before consent on etrade.com, including Adobe (Tracker Tracker), SiteImprove (Analytics Tracker), Advertising Tracker and 23 more.

Security Headers

3/6 present

Strict-Transport-Security

max-age=31536000

Content-Security-Policy

Add a Content-Security-Policy header to prevent XSS and code injection attacks

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

V2
65/100

Consent Parameters

ParameterDefaultUpdated
Ad Storagenot_setgranted
Ad User Datanot_setgranted
Ad Personalizationnot_setgranted
Analytics Storagenot_setgranted
Functionality Storagenot_setnot_set
Personalization Storagenot_setnot_set
Security Storagenot_setnot_set

Issues (2)

No default consent call detected — consent mode may not be initialised correctly

No GTM container detected — consent mode works best with Google Tag Manager

Post-Rejection Audit

Reject Button

Missing

Post-Rejection Fires

0 vendors

Consent Mode

Not Detected

GTM Load

Not detected

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

Consent Record Audit

Issues detected

Consent record stored after interaction

GDPR Art. 7(1)

No consent record written — cannot prove consent was given

No CMP consent cookie or localStorage entry was found after the consent interaction. GDPR requires controllers to demonstrate consent was given.

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

No way for users to withdraw consent found on page

No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.

Why this matters

Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.

Tracker categories detected

Advertising13 vendors
Analytics5 vendors
Marketing6 vendors
Security3
Functional2 vendors
Critical55
Pinterest Tag
Pinterest Tag2 findingsID tracked

ct.pinterest.com, s.pinimg.com

Pinterest Tag
criticalNetworkAdvertisingPinterest Tag

Pinterest Tag (Pinterest) loaded before consent: Pinterest conversion tracking

ID: 2613624630091Host: ct.pinterest.comFired: 3161ms after load
Pinterest Tag
criticalNetworkAdvertisingPinterest Tag

Pinterest Tag (Pinterest) loaded before consent: Pinterest tag script loader

Host: s.pinimg.comFired: 2976ms after load
Meta Pixel
Meta Pixel3 findingsID tracked

www.facebook.com, connect.facebook.net, _fbp

Meta Pixel
criticalNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded before consent: Meta Pixel tracking endpoint

ID: 1734143613529816Host: www.facebook.comFired: 3359ms after load
Meta Pixel
criticalNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded before consent: Sends user data to Meta for ad targeting and conversion tracking

Host: connect.facebook.netFired: 3048ms after load
Meta Pixel
criticalCookieAdvertisingMeta Pixel

Meta Pixel cookie "_fbp" set before consent

Cookie: _fbpDomain: .etrade.com
Adobe (Tracker Tracker)
Adobe (Tracker Tracker)2 findings

dpm.demdex.net, adobedc.demdex.net

Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: dpm.demdex.netFired: 1194ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: adobedc.demdex.netFired: 1954ms after load
SiteImprove (Analytics Tracker)
SiteImprove (Analytics Tracker)2 findings

siteimproveanalytics.com, 10086.global.siteimproveanalytics.io

SiteImprove (Analytics Tracker)
criticalNetworkAnalyticsSiteImprove (Analytics Tracker)

SiteImprove (analytics) loaded before consent

Host: siteimproveanalytics.comFired: 1313ms after load
SiteImprove (Analytics Tracker)
criticalNetworkAnalyticsSiteImprove (Analytics Tracker)

SiteImprove (analytics) loaded before consent

Host: 10086.global.siteimproveanalytics.ioFired: 2069ms after load
Advertising Tracker
Advertising Tracker6 findings

smetrics.morganstanley.com, cs.media.net, d34r8q7sht0t9k.cloudfront.net, ipv4.podscribe.com, verifi.podscribe.com, client-logger.salemove.com

Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at smetrics.morganstanley.com loaded before consent

Host: smetrics.morganstanley.comFired: 1938ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at cs.media.net loaded before consent

Host: cs.media.netFired: 2452ms after load
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at d34r8q7sht0t9k.cloudfront.net loaded before consent

Host: d34r8q7sht0t9k.cloudfront.netFired: 2458ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at ipv4.podscribe.com loaded before consent

Host: ipv4.podscribe.comFired: 2509ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at verifi.podscribe.com loaded before consent

Host: verifi.podscribe.comFired: 2883ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at client-logger.salemove.com loaded before consent

Host: client-logger.salemove.comFired: 7153ms after load
GA4
criticalNetworkAnalyticsGA4

GA4 (Google) loaded before consent: Google Analytics gtag.js library

Host: www.googletagmanager.comFired: 2143ms after load
Google Ads
Google Ads5 findings

www.google.com, googleads.g.doubleclick.net, www.googleadservices.com, _gcl_au, _gcl_ls

Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Google Consent Mode data collection for ad measurement

Host: www.google.comFired: 2303ms after load
Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Sends conversion data to Google Ads

Host: googleads.g.doubleclick.netFired: 2844ms after load
Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Google Ads conversion tracking

Host: www.googleadservices.comFired: 2844ms after load
Google Ads
criticalCookieAdvertisingGoogle Ads

Google Ads cookie "_gcl_au" set before consent

Cookie: _gcl_auDomain: .etrade.com
Google Ads
criticalStorageAdvertisingGoogle Ads

Google Ads (Google) wrote "_gcl_ls" to localStorage before consent

Key: _gcl_lsType: localStorageFired: 2285ms after load
Google (Tracker Tracker)
Google (Tracker Tracker)3 findings

ad.doubleclick.net, 4601119.fls.doubleclick.net, adservice.google.com

Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: ad.doubleclick.netFired: 2325ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: 4601119.fls.doubleclick.netFired: 2352ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: adservice.google.comFired: 2451ms after load
Cognitiv (Advertising Tracker)
criticalNetworkAdvertisingCognitiv (Advertising Tracker)

Cognitiv (advertising) loaded before consent

Host: beacon.lynx.cognitivlabs.comFired: 2377ms after load
Amazon (Advertising Tracker)
criticalNetworkAdvertisingAmazon (Advertising Tracker)

Amazon (advertising) loaded before consent

Host: c.amazon-adsystem.comFired: 2398ms after load
Yahoo! (Analytics Tracker)
criticalNetworkAnalyticsYahoo! (Analytics Tracker)

Yahoo! (analytics) loaded before consent

Host: sp.analytics.yahoo.comFired: 2434ms after load
reddit (Advertising Tracker)
criticalNetworkAdvertisingreddit (Advertising Tracker)

reddit (advertising) loaded before consent

Host: www.redditstatic.comFired: 2470ms after load
Microsoft Ads
Microsoft Ads3 findings

bat.bing.com, _uetsid, _uetvid

Microsoft Ads
criticalNetworkAdvertisingMicrosoft Ads

Microsoft Ads (Microsoft) loaded before consent: Microsoft Ads (Bing) UET conversion tracking

Host: bat.bing.comFired: 2497ms after load
Microsoft Ads
criticalCookieAdvertisingMicrosoft Ads

Microsoft Ads cookie "_uetsid" set before consent

Cookie: _uetsidDomain: .etrade.com
Microsoft Ads
criticalCookieAdvertisingMicrosoft Ads

Microsoft Ads cookie "_uetvid" set before consent

Cookie: _uetvidDomain: .etrade.com
LinkedIn Insight Tag
criticalNetworkAdvertisingLinkedIn Insight Tag

LinkedIn Insight Tag (LinkedIn) loaded before consent: Tracks conversions and enables LinkedIn audience targeting

Host: snap.licdn.comFired: 2530ms after load
Reddit Pixel
Reddit Pixel2 findings

alb.reddit.com, _rdt_uuid

Reddit Pixel
criticalNetworkAdvertisingReddit Pixel

Reddit Pixel (Reddit) loaded before consent: Reddit conversion tracking pixel

Host: alb.reddit.comFired: 2569ms after load
Reddit Pixel
criticalCookieAdvertisingReddit Pixel

Reddit Pixel cookie "_rdt_uuid" set before consent

Cookie: _rdt_uuidDomain: .etrade.com
LiveRamp (Advertising Tracker)
criticalNetworkAdvertisingLiveRamp (Advertising Tracker)

LiveRamp (advertising) loaded before consent

Host: idsync.rlcdn.comFired: 2956ms after load
Cadent (Advertising Tracker)
criticalNetworkAdvertisingCadent (Advertising Tracker)

Cadent (advertising) loaded before consent

Host: px.adentifi.comFired: 3005ms after load
Twitter/X Pixel
criticalNetworkAdvertisingTwitter/X Pixel

Twitter/X Pixel (X (Twitter)) loaded before consent: Loads Twitter/X conversion tracking script

Host: static.ads-twitter.comFired: 3062ms after load
Adobe Audience Manager
Adobe Audience Manager2 findings

demdex, AMCVS_9355F0CC5405D58C0A4C98A1%40AdobeOrg

Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "demdex" set before consent — Unique value with which Audience Manager can identify a user. Used, among others, for identification, segmentation, modeling and reporting purposes.

Cookie: demdexDomain: .demdex.netRetention: 180 days after last activity or 10 years when opting out
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "AMCVS_9355F0CC5405D58C0A4C98A1%40AdobeOrg" set before consent — The AMCVS cookie serves as a flag indicating that the session has been initialized. Its value is always 1 and discontinues when the session has ended.

Cookie: AMCVS_9355F0CC5405D58C0A4C98A1%40AdobeOrgDomain: .etrade.comRetention: Session
Adobe Analytics
criticalCookieAnalyticsAdobe Analytics

Adobe Analytics cookie "AMCV_9355F0CC5405D58C0A4C98A1%40AdobeOrg" set before consent

Cookie: AMCV_9355F0CC5405D58C0A4C98A1%40AdobeOrgDomain: .etrade.com
criticalCookieAnalyticsSiteimprove

Siteimprove cookie "nmstat" set before consent — This cookie is used to help record the visitor's use of the website. It is used to collect statistics about site usage such as when the visitor last visited the site. This information is then used to improve the user experience on the website. This Siteimprove Analytics cookie contains a randomly generated ID used to recognize the browser when a visitor reads a page. The cookie contains no personal information and is used only for web analytics. It is also used to track the sequence of pages a visitor looks at during a visit to the site. This information can be used to reduce user journeys, and enable visitors to find relevant information quicker.

Cookie: nmstatDomain: .etrade.comRetention: 3 years
Adform
criticalCookieMarketingAdform

Adform cookie "UID" set before consent — Contains a unique ID to identify a user

Cookie: UIDDomain: beacon.lynx.cognitivlabs.comRetention: 60 days
Bing / Microsoft
criticalCookieMarketingBing / Microsoft

Bing / Microsoft cookie "MUID" set before consent — Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.

Cookie: MUIDDomain: .bing.comRetention: 1 year
LinkedIn
LinkedIn2 findings

bcookie, lidc

LinkedIn
criticalCookieMarketingLinkedIn

LinkedIn cookie "bcookie" set before consent — Used by LinkedIn to track the use of embedded services.

Cookie: bcookieDomain: .linkedin.comRetention: 1 year
LinkedIn
criticalCookieMarketingLinkedIn

LinkedIn cookie "lidc" set before consent — Used by the social networking service, LinkedIn, for tracking the use of embedded services.

Cookie: lidcDomain: .linkedin.comRetention: 1 day
DoubleClick/Google Marketing
criticalCookieMarketingDoubleClick/Google Marketing

DoubleClick/Google Marketing cookie "IDE" set before consent — This cookie is used for targeting, analyzing and optimisation of ad campaigns in DoubleClick/Google Marketing Suite

Cookie: IDEDomain: .doubleclick.netRetention: 2 years
X5 findings

muc_ads, guest_id_marketing, guest_id_ads, personalization_id, guest_id

criticalCookieMarketingX

X cookie "muc_ads" set before consent — These cookies are placed when you come to our website via X. A cookie from X is also placed on our website, with which we can later show a relevant offer on X

Cookie: muc_adsDomain: .t.coRetention: 24 months
criticalCookieMarketingX

X cookie "guest_id_marketing" set before consent — This cookie is for advertising when logged out

Cookie: guest_id_marketingDomain: .twitter.comRetention: 2 years
criticalCookieMarketingX

X cookie "guest_id_ads" set before consent — This cookie is for advertising when logged out

Cookie: guest_id_adsDomain: .twitter.comRetention: 2 years
criticalCookieMarketingX

X cookie "personalization_id" set before consent — Unique value with which users can be identified by X. Collected information is used to be personalize X services, including X trends, stories, ads and suggestions.

Cookie: personalization_idDomain: .twitter.comRetention: 2 years
criticalCookieMarketingX

X cookie "guest_id" set before consent — This cookie is set by X to identify and track the website visitor. Registers if a users is signed in the X platform and collects information about ad preferences.

Cookie: guest_idDomain: .twitter.comRetention: 2 years
criticalNetwork

No consent banner detected — all cookies and tags fire without user consent

criticalConsent

No "reject all" option found — users cannot refuse non-essential cookies (ICO guidance requires this)

criticalConsent Record

No recognizable consent cookie or storage entry detected after interaction — GDPR Article 7(1) requires controllers to demonstrate consent was given (server-side storage cannot be verified)

criticalConsent Record

No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)

Warnings36
Twitter (Social Tracker)
warningNetworkTwitter (Social Tracker)

Twitter (social) loaded before consent

ID: nvgnfHost: analytics.twitter.comFired: 3277ms after load
vendor logo
warningNetwork

Unknown third-party request to px.ads.linkedin.com before consent

ID: 30120Host: px.ads.linkedin.comFired: 2595ms after load
vendor logo
warningNetwork

Unknown third-party request to t.co before consent

ID: twHost: t.coFired: 3267ms after load
reddit (Social Tracker)
warningNetworkreddit (Social Tracker)

reddit (social) loaded before consent

Host: pixel-config.reddit.comFired: 2569ms after load
vendor logo
warningNetwork

Unknown third-party request to cdn2.etrade.net before consent

Host: cdn2.etrade.netFired: 596ms after load
vendor logo
warningNetwork

Unknown third-party request to assets.adobedtm.com before consent

Host: assets.adobedtm.comFired: 609ms after load
vendor logo
warningNetwork

Unknown third-party request to c.evidon.com before consent

Host: c.evidon.comFired: 1318ms after load
vendor logo
warningNetwork

Unknown third-party request to l.evidon.com before consent

Host: l.evidon.comFired: 2101ms after load
vendor logo
warningNetwork

Unknown third-party request to c.pmsrv.co before consent

Host: c.pmsrv.coFired: 2123ms after load
vendor logo
warningNetwork

Unknown third-party request to analytics.pmsrv.co before consent

Host: analytics.pmsrv.coFired: 2317ms after load
vendor logo
warningNetwork

Unknown third-party request to www.google.com before consent

Host: www.google.comFired: 2485ms after load
vendor logo
warningNetwork

Unknown third-party request to api.glia.com before consent

Host: api.glia.comFired: 2844ms after load
vendor logo
warningNetwork

Unknown third-party request to libs.salemove.com before consent

Host: libs.salemove.comFired: 3497ms after load
vendor logo
warningNetwork

Unknown third-party request to api.salemove.com before consent

Host: api.salemove.comFired: 4371ms after load
vendor logo
warningNetwork

Unknown third-party request to site-assets.salemove.com before consent

Host: site-assets.salemove.comFired: 4371ms after load
warningStorage

localStorage key "__akfp_storage_test__" written before consent

Key: __akfp_storage_test__Type: localStorageFired: 1956ms after load
warningStorage

localStorage key "_evidon_consent_ls_96095" written before consent

Key: _evidon_consent_ls_96095Type: localStorageFired: 2089ms after load
warningStorage

localStorage key "_evidon_visitor_ls_96095" written before consent

Key: _evidon_visitor_ls_96095Type: localStorageFired: 2096ms after load
warningStorage

localStorage key "0.2398850357686333_t" written before consent

Key: 0.2398850357686333_tType: localStorageFired: 2313ms after load
warningStorage

sessionStorage key "0.3761137776825729_t" written before consent

Key: 0.3761137776825729_tType: sessionStorageFired: 2314ms after load
warningStorage

sessionStorage key "0.11814026209119433_t" written before consent

Key: 0.11814026209119433_tType: sessionStorageFired: 2314ms after load
warningStorage

sessionStorage key "0.11867050806794288_t" written before consent

Key: 0.11867050806794288_tType: sessionStorageFired: 2315ms after load
warningStorage

sessionStorage key "_pmedia" written before consent

Key: _pmediaType: sessionStorageFired: 2315ms after load
warningStorage

localStorage key "_uetsid" written before consent

Key: _uetsidType: localStorageFired: 2651ms after load
warningStorage

localStorage key "_uetsid_exp" written before consent

Key: _uetsid_expType: localStorageFired: 2651ms after load
warningStorage

localStorage key "_uetvid" written before consent

Key: _uetvidType: localStorageFired: 2652ms after load
warningStorage

localStorage key "_uetvid_exp" written before consent

Key: _uetvid_expType: localStorageFired: 2652ms after load
warningStorage

localStorage key "sm.test" written before consent

Key: sm.testType: localStorageFired: 3285ms after load
warningStorage

localStorage key "lastExternalReferrer" written before consent

Key: lastExternalReferrerType: localStorageFired: 3296ms after load
warningStorage

localStorage key "liveAgentTestKey" written before consent

Key: liveAgentTestKeyType: localStorageFired: 3783ms after load
warningStorage

localStorage key "sm.access_token" written before consent

Key: sm.access_tokenType: localStorageFired: 4214ms after load
warningStorage

sessionStorage key "sm.tab_ids" written before consent

Key: sm.tab_idsType: sessionStorageFired: 4217ms after load
warningStorage

sessionStorage key "sm.custom_reestablish_handler_set" written before consent

Key: sm.custom_reestablish_handler_setType: sessionStorageFired: 4824ms after load
warningStorage

sessionStorage key "sm-visitor" written before consent

Key: sm-visitorType: sessionStorageFired: 4826ms after load
warningStorage

sessionStorage key "sm.omnibrowse_custom_reestablish_handler_set" written before consent

Key: sm.omnibrowse_custom_reestablish_handler_setType: sessionStorageFired: 4852ms after load
warningStorage

localStorage key "sm.visitor_priority" written before consent

Key: sm.visitor_priorityType: localStorageFired: 4873ms after load
Info8
Yahoo! (Cdn)
infoNetworkYahoo! (Cdn)

Yahoo! (cdn) loaded before consent

Host: s.yimg.comFired: 2365ms after load
Google (Cdn)
infoNetworkGoogle (Cdn)

Google (cdn) loaded before consent

Host: www.google.nlFired: 2959ms after load
Salesforce (Cdn)
infoNetworkSalesforce (Cdn)

Salesforce (cdn) loaded before consent

Host: c.la1-c1cs-ph2.salesforceliveagent.comFired: 3128ms after load
Citrix2 findings

NSC_JOc3tzwvc1q1vjtccuygxndugvovect, NSC_vt1x401n5-mc.fusbef.dpn*443-ot

infoCookieFunctionalCitrix

Citrix cookie "NSC_JOc3tzwvc1q1vjtccuygxndugvovect" set before consent — This cookie name is associated with the Netscaler load balancing service from Citrix. This is a pattern type cookie with the root being NSC_ and the rest of the name being a unique encrypted alpha numeric identifier for the virtual server it originated from. The cookie is used to ensure traffic and user data is routed to the correct locations where a site is hosted on multiple servers, so that the end user has a consistent experience.

Cookie: NSC_JOc3tzwvc1q1vjtccuygxndugvovectDomain: us.etrade.comRetention: 12 hours
infoCookieFunctionalCitrix

Citrix cookie "NSC_vt1x401n5-mc.fusbef.dpn*443-ot" set before consent — This cookie name is associated with the Netscaler load balancing service from Citrix. This is a pattern type cookie with the root being NSC_ and the rest of the name being a unique encrypted alpha numeric identifier for the virtual server it originated from. The cookie is used to ensure traffic and user data is routed to the correct locations where a site is hosted on multiple servers, so that the end user has a consistent experience.

Cookie: NSC_vt1x401n5-mc.fusbef.dpn*443-otDomain: us.etrade.comRetention: 12 hours
LinkedIn
infoCookieFunctionalLinkedIn

LinkedIn cookie "li_gc" set before consent — Used to store guest consent to the use of cookies for non-essential purposes

Cookie: li_gcDomain: .linkedin.comRetention: 2 years
infoCookieFunctional

Akamai bot management — necessary for site protection

Cookie: bm_svDomain: .etrade.com
infoCookieFunctional

Akamai bot management session — necessary for site protection

Cookie: ak_bmscDomain: .etrade.com

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan etrade.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com