Vanguard

vanguard.com

Compare

Geo-redirect detected

https://vanguard.com redirected to https://investor.vanguard.com/corporate-portal.

https://vanguard.com

Scanned Apr 15, 2026 · 34.7s

Your website score is

0/100
Critical

Grade

F0

Banner

Yes

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 92 user data leaks before consent on vanguard.com, including Adobe (Tracker Tracker), GA4, Google Ads and 43 more.

Security Headers

1/6 present

Strict-Transport-Security

max-age=15768000 ; includeSubDomains

Content-Security-Policy

Add a Content-Security-Policy header to prevent XSS and code injection attacks

X-Frame-Options

Add X-Frame-Options header to prevent clickjacking attacks

X-Content-Type-Options

Set X-Content-Type-Options to 'nosniff' to prevent MIME type sniffing

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

Not Detected

Google Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.

Post-Rejection Audit

Reject Button

Found

Post-Rejection Fires

0 vendors

Consent Mode

Not Detected

GTM Load

Not detected

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

No tracking vendors detected firing after rejection

Consent Record Audit

Pass

Consent record stored after interaction

GDPR Art. 7(1)

Found: OptanonConsent (OneTrust)

Record contains timestamp

Art. 7(1)

Timestamp field detected

Record contains consent state

Art. 7(1)

Accept/reject state detected

Record contains consent categories

Art. 7(1)

Consent categories (analytics, marketing, etc.) not found in record

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

Cookie settings link / floating button found

Consent record and withdrawal mechanism are both correctly implemented

Tracker categories detected

Advertising22 vendors
Analytics7 vendors
Marketing11 vendors
Security5
Functional1 vendor
Critical76

Data was transmitted to a third-party or storage was written on the user’s device before consent. This is a GDPR/ePrivacy violation, not just a script load.

Pinterest Tag
criticalNetworkAdvertisingPinterest Tag

Pinterest Tag (Pinterest) loaded before consent: Pinterest conversion tracking

ID: 2614193421856Host: ct.pinterest.comFired: 3793ms after load
Meta Pixel
Meta Pixel3 findingsID tracked

www.facebook.com, connect.facebook.net, _fbp

Meta Pixel
criticalNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded before consent: Meta Pixel tracking endpoint

ID: 926393531540588Host: www.facebook.comFired: 6711ms after load
Meta Pixel
criticalNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded before consent: Sends user data to Meta for ad targeting and conversion tracking

Host: connect.facebook.netFired: 6465ms after load
Meta Pixel
criticalCookieAdvertisingMeta Pixel

Meta Pixel cookie "_fbp" set before consent

Cookie: _fbpDomain: .vanguard.com
Adobe (Tracker Tracker)
Adobe (Tracker Tracker)3 findings

adobedc.demdex.net, dpm.demdex.net, sync-tm.everesttech.net

Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: adobedc.demdex.netFired: 1834ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: dpm.demdex.netFired: 5951ms after load
Adobe (Tracker Tracker)
criticalNetworkAdobe (Tracker Tracker)

Adobe (tracker) loaded before consent

Host: sync-tm.everesttech.netFired: 5952ms after load
Google Analytics
Google Analytics2 findings

www.googletagmanager.com, FPID

GA4
criticalNetworkAnalyticsGA4

GA4 (Google) loaded before consent: Google Analytics gtag.js library

Host: www.googletagmanager.comFired: 2343ms after load
Google Analytics
criticalCookieAnalyticsGoogle Analytics

Google Analytics cookie "FPID" set before consent — Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.

Cookie: FPIDDomain: .vanguard.comRetention: session
Google Ads
Google Ads5 findings

www.google.com, www.googleadservices.com, googleads.g.doubleclick.net, _gcl_au, _gcl_ls

Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Google Consent Mode data collection for ad measurement

Host: www.google.comFired: 2500ms after load
Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Google Ads conversion tracking

Host: www.googleadservices.comFired: 3851ms after load
Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Sends conversion data to Google Ads

Host: googleads.g.doubleclick.netFired: 3985ms after load
Google Ads
criticalCookieAdvertisingGoogle Ads

Google Ads cookie "_gcl_au" set before consent

Cookie: _gcl_auDomain: .vanguard.com
Google Ads
criticalStorageAdvertisingGoogle Ads

Google Ads (Google) wrote "_gcl_ls" to localStorage before consent

Key: _gcl_lsType: localStorageFired: 2489ms after load
Claritas (Advertising Tracker)
criticalNetworkAdvertisingClaritas (Advertising Tracker)

Claritas (advertising) loaded before consent

Host: trkn.usFired: 3244ms after load
Simpli.fi (Advertising Tracker)
criticalNetworkAdvertisingSimpli.fi (Advertising Tracker)

Simpli.fi (advertising) loaded before consent

Host: cdn.bttrack.comFired: 3651ms after load
Google (Tracker Tracker)
Google (Tracker Tracker)3 findings

12332392.fls.doubleclick.net, 9544918.fls.doubleclick.net, cm.g.doubleclick.net

Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: 12332392.fls.doubleclick.netFired: 3663ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: 9544918.fls.doubleclick.netFired: 3934ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: cm.g.doubleclick.netFired: 5951ms after load
Amazon (Advertising Tracker)
criticalNetworkAdvertisingAmazon (Advertising Tracker)

Amazon (advertising) loaded before consent

Host: s.amazon-adsystem.comFired: 3663ms after load
Samsung (Advertising Tracker)
criticalNetworkAdvertisingSamsung (Advertising Tracker)

Samsung (advertising) loaded before consent

Host: rtb.adgrx.comFired: 3793ms after load
The Trade Desk (Tracker Tracker)
criticalNetworkThe Trade Desk (Tracker Tracker)

The Trade Desk (tracker) loaded before consent

Host: insight.adsrvr.orgFired: 3798ms after load
Microsoft Ads
criticalNetworkAdvertisingMicrosoft Ads

Microsoft Ads (Microsoft) loaded before consent: Microsoft Ads (Bing) UET conversion tracking

Host: bat.bing.comFired: 3933ms after load
Medallia (Analytics Tracker)
criticalNetworkAnalyticsMedallia (Analytics Tracker)

Medallia (analytics) loaded before consent

Host: resources.digital-cloud-prem.medallia.comFired: 4026ms after load
Advertising Tracker
Advertising Tracker2 findings

bat.bing.net, analytics-fe.digital-cloud-prem.medallia.com

Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at bat.bing.net loaded before consent

Host: bat.bing.netFired: 4035ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at analytics-fe.digital-cloud-prem.medallia.com loaded before consent

Host: analytics-fe.digital-cloud-prem.medallia.comFired: 4151ms after load
Yahoo! (Analytics Tracker)
criticalNetworkAnalyticsYahoo! (Analytics Tracker)

Yahoo! (analytics) loaded before consent

Host: sp.analytics.yahoo.comFired: 4179ms after load
PublicisGroupe (Tracker Tracker)
criticalNetworkPublicisGroupe (Tracker Tracker)

PublicisGroupe (tracker) loaded before consent

Host: login.dotomi.comFired: 4179ms after load
Roku (Advertising Tracker)
criticalNetworkAdvertisingRoku (Advertising Tracker)

Roku (advertising) loaded before consent

Host: tags.w55c.netFired: 4196ms after load
Perion (Advertising Tracker)
criticalNetworkAdvertisingPerion (Advertising Tracker)

Perion (advertising) loaded before consent

Host: ads.undertone.comFired: 4196ms after load
Spotify (Analytics Tracker)
criticalNetworkAnalyticsSpotify (Analytics Tracker)

Spotify (analytics) loaded before consent

Host: ping.pdst.fmFired: 4200ms after load
Invoca (Advertising Tracker)
criticalNetworkAdvertisingInvoca (Advertising Tracker)

Invoca (advertising) loaded before consent

Host: pnapi.invoca.netFired: 5141ms after load
Decibel Insight (Advertising Tracker)
criticalNetworkAdvertisingDecibel Insight (Advertising Tracker)

Decibel Insight (advertising) loaded before consent

Host: collection.decibelinsight.netFired: 5426ms after load
ZetaGlobal (Advertising Tracker)
ZetaGlobal (Advertising Tracker)10 findings

live.rezync.com, cdn.boomtrain.com, c1.rfihub.net, 20879319p.rfihub.com, 20860028p.rfihub.com, p.rfihub.com, i.liadm.com, a.rfihub.com, people.api.boomtrain.com, events.api.boomtrain.com

ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: live.rezync.comFired: 5426ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: cdn.boomtrain.comFired: 5851ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: c1.rfihub.netFired: 5851ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: 20879319p.rfihub.comFired: 5884ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: 20860028p.rfihub.comFired: 5885ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: p.rfihub.comFired: 5951ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: i.liadm.comFired: 5951ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: a.rfihub.comFired: 5996ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: people.api.boomtrain.comFired: 6296ms after load
ZetaGlobal (Advertising Tracker)
criticalNetworkAdvertisingZetaGlobal (Advertising Tracker)

ZetaGlobal (advertising) loaded before consent

Host: events.api.boomtrain.comFired: 6739ms after load
Microsoft (Advertising Tracker)
criticalNetworkAdvertisingMicrosoft (Advertising Tracker)

Microsoft (advertising) loaded before consent

Host: ib.adnxs.comFired: 5951ms after load
PubMatic (Advertising Tracker)
criticalNetworkAdvertisingPubMatic (Advertising Tracker)

PubMatic (advertising) loaded before consent

Host: image2.pubmatic.comFired: 5951ms after load
OpenX (Tracker Tracker)
criticalNetworkOpenX (Tracker Tracker)

OpenX (tracker) loaded before consent

Host: us-u.openx.netFired: 5951ms after load
media.net (Advertising Tracker)
criticalNetworkAdvertisingmedia.net (Advertising Tracker)

media.net (advertising) loaded before consent

Host: contextual.media.netFired: 5951ms after load
RoqAd (Tracker Tracker)
criticalNetworkRoqAd (Tracker Tracker)

RoqAd (tracker) loaded before consent

Host: wt.rqtrk.euFired: 5951ms after load
IndexExchange (Advertising Tracker)
criticalNetworkAdvertisingIndexExchange (Advertising Tracker)

IndexExchange (advertising) loaded before consent

Host: dsum-sec.casalemedia.comFired: 5952ms after load
LiveRamp (Advertising Tracker)
criticalNetworkAdvertisingLiveRamp (Advertising Tracker)

LiveRamp (advertising) loaded before consent

Host: idsync.rlcdn.comFired: 5952ms after load
Nexxen (Advertising Tracker)
criticalNetworkAdvertisingNexxen (Advertising Tracker)

Nexxen (advertising) loaded before consent

Host: partners.tremorhub.comFired: 5952ms after load
TransUnion (Advertising Tracker)
criticalNetworkAdvertisingTransUnion (Advertising Tracker)

TransUnion (advertising) loaded before consent

Host: aa.agkn.comFired: 5952ms after load
Criteo (Advertising Tracker)
criticalNetworkAdvertisingCriteo (Advertising Tracker)

Criteo (advertising) loaded before consent

Host: x.bidswitch.netFired: 5952ms after load
Dun & Bradstreet (Analytics Tracker)
criticalNetworkAnalyticsDun & Bradstreet (Analytics Tracker)

Dun & Bradstreet (analytics) loaded before consent

Host: ps.eyeota.netFired: 6010ms after load
Adobe Audience Manager
Adobe Audience Manager3 findings

demdex, mbox, dpm

Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "demdex" set before consent — Unique value with which Audience Manager can identify a user. Used, among others, for identification, segmentation, modeling and reporting purposes.

Cookie: demdexDomain: .demdex.netRetention: 180 days after last activity or 10 years when opting out
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "mbox" set before consent — Adobe Target uses cookies to give website operators the ability to test which online content and offers are more relevant to visitors.

Cookie: mboxDomain: .vanguard.comRetention: 2 years
Adobe Audience Manager
criticalCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "dpm" set before consent — DPM is an abbreviation for Data Provider Match. It tells internal, Adobe systems that a call from Audience Manager or the Adobe Experience Cloud ID Service is passing in customer data for synchronization or requesting an ID.

Cookie: dpmDomain: .dpm.demdex.netRetention: 180 days
Adobe Analytics
criticalCookieAnalyticsAdobe Analytics

Adobe Analytics cookie "AMCV_92CA3704532954400A490D44%40AdobeOrg" set before consent

Cookie: AMCV_92CA3704532954400A490D44%40AdobeOrgDomain: .vanguard.com
criticalCookieMarketingClaritas

Claritas cookie "barometric[cuid]" set before consent — This cookie is used to identify users for Veritone/Barometric Podcast Conversion.

Cookie: barometric[cuid]Domain: .trkn.usRetention: 1 year
DoubleClick/Google Marketing
DoubleClick/Google Marketing2 findings

ar_debug, IDE

DoubleClick/Google Marketing
criticalCookieMarketingDoubleClick/Google Marketing

DoubleClick/Google Marketing cookie "ar_debug" set before consent — Store and track conversions

Cookie: ar_debugDomain: .pinterest.comRetention: Persistent
DoubleClick/Google Marketing
criticalCookieMarketingDoubleClick/Google Marketing

DoubleClick/Google Marketing cookie "IDE" set before consent — This cookie is used for targeting, analyzing and optimisation of ad campaigns in DoubleClick/Google Marketing Suite

Cookie: IDEDomain: .doubleclick.netRetention: 2 years
Amazon
Amazon2 findings

ad-id, ad-privacy

Amazon
criticalCookieMarketingAmazon

Amazon cookie "ad-id" set before consent — Clickthroughs to Amazon websites: Noting how the user got to Amazon via this website

Cookie: ad-idDomain: .amazon-adsystem.comRetention: 190 days
Amazon
criticalCookieMarketingAmazon

Amazon cookie "ad-privacy" set before consent — Provided by amazon-adsystem.com for tracking user actions on other websites to provide targeted content to the users.

Cookie: ad-privacyDomain: .amazon-adsystem.comRetention: 5 years
Undertone2 findings

UTID, UTID_ENC

criticalCookieMarketingUndertone

Undertone cookie "UTID" set before consent — This cookie is used to store the user's unique identifier

Cookie: UTIDDomain: .undertone.comRetention: 1 year
criticalCookieMarketingUndertone

Undertone cookie "UTID_ENC" set before consent — This cookie is used to store the user's unique identifier

Cookie: UTID_ENCDomain: .undertone.comRetention: 1 year
Rapleaf2 findings

rlas3, pxrc

criticalCookieMarketingRapleaf

Rapleaf cookie "rlas3" set before consent — Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

Cookie: rlas3Domain: .rlcdn.comRetention: 1 year
criticalCookieMarketingRapleaf

Rapleaf cookie "pxrc" set before consent — This cookie registers non-personal data on the visitor. The information is used to optimize advertisement relevance.

Cookie: pxrcDomain: .rlcdn.comRetention: 2 months
Casale Media3 findings

CMID, CMPS, CMPRO

criticalCookieMarketingCasale Media

Casale Media cookie "CMID" set before consent — Collects visitor data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.

Cookie: CMIDDomain: .casalemedia.comRetention: 1 day
criticalCookieMarketingCasale Media

Casale Media cookie "CMPS" set before consent — Collects visitor data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads

Cookie: CMPSDomain: .casalemedia.comRetention: 1 day
criticalCookieMarketingCasale Media

Casale Media cookie "CMPRO" set before consent — Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement - This also allows the website to limit the number of times that the visitor is shown the same advertisement.

Cookie: CMPRODomain: .casalemedia.comRetention: 1 day
openx.net
criticalCookieMarketingopenx.net

openx.net cookie "i" set before consent — Registers user data, such as IP address, geographical location, websites visited and on which advertisements the user has clicked, with the aim of optimizing the display of advertisements based on user relocation on websites that use the same advertising network.

Cookie: iDomain: .openx.netRetention: 1 year
Media.net2 findings

visitor-id, data-rk

criticalCookieMarketingMedia.net

Media.net cookie "visitor-id" set before consent — This cookie is used to collect information on the visitor, which we then use for analytics purposes.

Cookie: visitor-idDomain: .media.netRetention: 1 year
criticalCookieMarketingMedia.net

Media.net cookie "data-rk" set before consent — Cookie used to record your browsing activity, with the purpose of displaying targeted ads.

Cookie: data-rkDomain: .media.netRetention: 1 year
Adobe Advertising
criticalCookieMarketingAdobe Advertising

Adobe Advertising cookie "everest_g_v2" set before consent — This cookie stores the browser and surfer ID.Created after a user initially clicks a client's ad, and used to map the current and subsequent clicks with other events on the client's website

Cookie: everest_g_v2Domain: .everesttech.netRetention: 2 years
LinkedIn
LinkedIn2 findings

bcookie, lidc

LinkedIn
criticalCookieMarketingLinkedIn

LinkedIn cookie "bcookie" set before consent — Used by LinkedIn to track the use of embedded services.

Cookie: bcookieDomain: .linkedin.comRetention: 1 year
LinkedIn
criticalCookieMarketingLinkedIn

LinkedIn cookie "lidc" set before consent — Used by the social networking service, LinkedIn, for tracking the use of embedded services.

Cookie: lidcDomain: .linkedin.comRetention: 1 day
Warnings16

A tag container or script loaded before consent but tags appear correctly gated (e.g. GTM with Consent Mode v2). Not a violation on its own — review to confirm downstream tags stay blocked.

vendor logo
warningNetwork

Unknown third-party request to px.ads.linkedin.com before consent

ID: 7608Host: px.ads.linkedin.comFired: 6023ms after load
Analytics proxy
warningNetworkAnalytics proxy

Possible server-side tag proxy at smetrics.vanguard.com — analytics data may be forwarded to third parties before consent. Browser scanning cannot verify downstream recipients; audit your GTM Server-side or CNAME configuration.

Host: smetrics.vanguard.comFired: 2343ms after load
vendor logo
warningNetwork

Unknown third-party request to www.google.com before consent

Host: www.google.comFired: 3837ms after load
vendor logo
warningNetwork

Unknown third-party request to arttrk.com before consent

Host: arttrk.comFired: 4190ms after load
vendor logo
warningNetwork

Unknown third-party request to corp.ivo.assets.vgdynamic.info before consent

Host: corp.ivo.assets.vgdynamic.infoFired: 4351ms after load
vendor logo
warningNetwork

Unknown third-party request to pix.pontiac.media before consent

Host: pix.pontiac.mediaFired: 4658ms after load
vendor logo
warningNetwork

Unknown third-party request to corp.etm.assets.vgdynamic.info before consent

Host: corp.etm.assets.vgdynamic.infoFired: 5426ms after load
warningStorage

localStorage key "dummy" written before consent

Key: dummyType: localStorageFired: 816ms after load
warningStorage

localStorage key "ak_a" written before consent

Key: ak_aType: localStorageFired: 957ms after load
warningStorage

sessionStorage key "com.adobe.reactor.core.visitorTracking.landingPage" written before consent

Key: com.adobe.reactor.core.visitorTracking.landingPageType: sessionStorageFired: 1811ms after load
warningStorage

sessionStorage key "com.adobe.reactor.core.visitorTracking.trafficSource" written before consent

Key: com.adobe.reactor.core.visitorTracking.trafficSourceType: sessionStorageFired: 1811ms after load
warningStorage

localStorage key "com.adobe.alloy.92CA3704532954400A490D44_AdobeOrg.consentHashes.Adobe.1.0" written before consent

Key: com.adobe.alloy.92CA3704532954400A490D44_AdobeOrg.consentHashes.Adobe.1.0Type: localStorageFired: 1955ms after load
warningStorage

sessionStorage key "di_tab_hash" written before consent

Key: di_tab_hashType: sessionStorageFired: 5398ms after load
warningStorage

localStorage key "invoca_id" written before consent

Key: invoca_idType: localStorageFired: 5568ms after load
warningStorage

sessionStorage key "_da_da_sessionId" written before consent

Key: _da_da_sessionIdType: sessionStorageFired: 5575ms after load
warningStorage

localStorage key "lastExternalReferrer" written before consent

Key: lastExternalReferrerType: localStorageFired: 6651ms after load
Info6

Neutral observations — activity we detected that isn’t a violation but is useful context (e.g. essential cookies, CMP initialisation).

OneTrust CMP
infoNetworkConsent MgmtOneTrust CMP

OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location

Host: geolocation.onetrust.comFired: 2465ms after load
Google (Cdn)
infoNetworkGoogle (Cdn)

Google (cdn) loaded before consent

Host: www.google.nlFired: 4170ms after load
OneTrust
infoCookieConsent MgmtOneTrust

OneTrust cookie "OptanonConsent" set before consent

Cookie: OptanonConsentDomain: .vanguard.com
LinkedIn
infoCookieFunctionalLinkedIn

LinkedIn cookie "li_gc" set before consent — Used to store guest consent to the use of cookies for non-essential purposes

Cookie: li_gcDomain: .linkedin.comRetention: 2 years
infoCookieFunctional

Akamai bot manager — necessary for site protection

Cookie: _abckDomain: .vanguard.com
infoCookieFunctional

Load balancer server affinity — necessary for infrastructure

Cookie: SERVERIDDomain: .eyeota.net
Compliant1

Tags that fired only after the user gave consent — working as intended.

OneTrust
CompliantCookieConsent MgmtOneTrust

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent

Cookie: OptanonAlertBoxClosedDomain: .vanguard.com

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan vanguard.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com