INVESTOR.VANGUARD.COM Website Review

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' https://*.wistia.com https://*.wistia.net *.bttrack.com:* *.vanguard.com:* *.medallia.com *.vgcontent.info:* *.go-mpulse.net *.kampyle.com *.limelight.com *.youtube.com *.llnw.net *.vgdynamic.info fast.wistia.com fast.wistia.net wistia.com wistia.net; script-src 'unsafe-eval' 'self' 'unsafe-inline' https://cdn.branch.io https://app.link https://*.wistia.com https://*.wistia.net https://documentservices.adobe.com https://acrobatservices.adobe.com https://src.litix.io https://*.sentry-cdn.com https://www.google.com https://www.gstatic.com bat.bing.com *.vanguard.com *.rezync.com *.rfihub.com *.rfihub.net *.dwcdn.net *.boomtrain.com *.vanguard.com:* *.vgcontent.info:* *.demdex.net *.limelight.com *.youtube.com *.go-mpulse.net *.llnw.net fls.doubleclick.net pnapi.invoca.net https://*.maze.co/ *.vgdynamic.info *.fls.doubleclick.net vanguard.d2.sc.omtrdc.net *.omniture.com activitymap.adobe.com *.vgdynamic.info connect.facebook.net www.googleadservices.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net api.ipify.org *.bttrack.com bttrack.com https://s.pinimg.com/ct/core.js s.amazon-adsystem.com www.redditstatic.com https://bat.bing.com/bat.js *.dotomi.com https://pixel.admedia.com/tracker.js *.doubleclick.net *.kampyle.com *.mypurecloud.com api.securedvisit.com https://*.decibel.com https://*.decibelinsight.net https://assets.adobedtm.com https://tagmanager.google.com images.securedvisit.com track.sv.rkdms.com wss://*.mypurecloud.com schema.milestoneinternet.com fast.wistia.com fast.wistia.net; style-src 'self' 'unsafe-inline' blob: https://fast.wistia.com *.vanguard.com:* *.vgdynamic.info *.vgcontent.info:* *.limelight.com *.youtube.com *.go-mpulse.net *.llnw.net *.kampyle.com https://*.maze.co/ *.mypurecloud.com content.securedvisit.com fast.wistia.com fast.wistia.net; connect-src 'self' https://api2.branch.io https://*.litix.io https://*.wistia.com https://*.wistia.net https://acrobatservices.adobe.com https://*.algolia.net schema.milestoneinternet.com edge.adobedc.net wss://*.mypurecloud.com wss://*.mypurecloud.com:* wss://frontgate-us.factset.com/ws *.boomtrain.com *.vanguard.com *.vanguard.com:* *.coveo.com *.vgdynamic.info *.vgcontent.info:* *.limelight.com *.dwcdn.net *.youtube.com *.go-mpulse.net *.llnw.net *.medallia.com *.kampyle.com *.demdex.net pnapi.invoca.net fls.doubleclick.net *.fls.doubleclick.net vanguard.d2.sc.omtrdc.net *.eum-appdynamics.com *.tt.omtrdc.net *.onetrust.com privacyportal-de.onetrust.com geolocation.onetrust.com cdn.cookielaw.org https://*.maze.co/ *.bttrack.com bttrack.com pagead2.googlesyndication.com www.google.com googleads.g.doubleclick.net https://pixel.admedia.com/log bat.bing.com *.mypurecloud.com api.company-target.com track.securedvisit.com https://*.decibel.com https://*.decibelinsight.net wss://*.decibelinsight.net fast.wistia.com fast.wistia.net; img-src 'self' data: https://*.wistia.com https://*.wistia.net https://documentservices.adobe.com https://acrobatservices.adobe.com login.dotomi.com products.gobankingrates.com b.videoamp.com *.vanguard.com:* evt.undertone.com bat.bing.com https://bat.bing.com/bat.js https://pixel.admedia.com/pixel.gif i.liadm.com i6.liadm.com images.securedvisit.com publicis-42-adswizz.attribution.adswizz.com tr.outbrain.com track.securedvisit.com track.sv.rkdms.com *.rezync.com *.pdst.fm:* *.dwcdn.net *.login.dotomi.com:* *.vgdynamic.info *.vgcontent.info:* *.demdex.net fls.doubleclick.net *.fls.doubleclick.net vanguard.d2.sc.omtrdc.net *.eum-appdynamics.com t.myvisualiq.net *.kampyle.com *.limelight.com *.youtube.com *.llnw.net *.go-mpulse.net action.dstillery.com action.media6degrees.com *.facebook.com *.pinterest.com sjs.bizographics.com *.linkedin.com snap.licdn.com P.adsymptotic.com *.adsrvr.org sp.analytics.yahoo.com s.amazon-adsystem.com https://*.maze.co/ ads.undertone.com googleads.g.doubleclick.net www.google.com ad.doubleclick.net adservice.google.com rtb.adgrx.com pix.pontiac.media googleadservices.com alb.reddit.com *.bttrack.com bttrack.com tags.w55c.net analytics.twitter.com t.co *.pdst.fm img.byspotify.com *.undertone.com https://arttrk.com ads.stickyadstv.com bh.contextweb.com dp-sync.dotomi.com idsync.rlcdn.com login-ds.dotomi.com login.dotomi.com partners.tremorhub.com pixel.adsafeprotected.com sync.1rx.io us-east.ads.audio.thisisdax.com fast.wistia.com fast.wistia.net wistia.com wistia.net; frame-src 'self' https://fast.wistia.com https://fast.wistia.net https://documentservices.adobe.com https://acrobatservices.adobe.com *.doubleclick.net *.mypurecloud.com content.securedvisit.com https://*.decibelinsight.net wss://*.mypurecloud.com *.e-vanguard.com *.google.com *.vanguard.com:* *.go-mpulse.net *.rfihub.com *.rfihub.net *.vgdynamic.info *.vgcontent.info:* *.limelight.com *.youtube.com *.llnw.net *.medallia.com *.demdex.net fls.doubleclick.net *.fls.doubleclick.net vanguard.d2.sc.omtrdc.net *.omniture.com activitymap.adobe.com *.e-vanguard.com *.kampyle.com *.vanguard.com *.adsrvr.org *.factsetdigitalsolutions.com *.onetrust.com fast.wistia.com fast.wistia.net wistia.com wistia.net; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net *.vgdynamic.info *.youtube-nocookie.com *.limelight.com *.youtube.com *.llnw.net fast.wistia.com fast.wistia.net wistia.com wistia.net; worker-src 'self' blob:; font-src 'self' data: https://fast.wistia.net https://*.wistia.net https://*.wistia.com *.vanguard.com:* *.vgcontent.info *.vgdynamic.info *.vgdynamic.info:* *.vgcontent.info:* https://*.maze.co/ fast.wistia.com fast.wistia.net; object-src 'self' *.vanguard.com:* *.vgcontent.info:*; frame-ancestors 'self' *.vanguard.com:*; child-src blob:;
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
X-Akamai-Transformed: 0 - 0 -
Content-Encoding: gzip
Cache-Control: max-age=1
Expires: Mon, 06 Apr 2026 11:07:16 GMT
Date: Mon, 06 Apr 2026 11:07:15 GMT
Content-Length: 31703
Connection: keep-alive
Vary: Accept-Encoding
Akamai-GRN: 0.4924c317.1775473634.a2fce6f0
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
Set-Cookie: _abck=21654A23A0BCA91F999FABDAD487A9A4~-1~YAAQSSTDFxM5TFCdAQAAD695Yg/wcnLWyx9hPGC7idFOpv4OKRd75iC63KIin/5ATXxp7NBRjEgCVXVeixvGdNaV5UksOeolhLj2/8C3mjsmdHa+BPVNKsobsPwP4rYO5aoqE84Hdbr55YnhkNrOQAqnoGiq2BMJpKYL4WjHmFOtCrkODc8VfiaW39wjORf+Hxk3jpv+GKPRe0YIC0cwm8IbHQc11VU2LuiPRTbSV3HlPa3PBdq7hbWrBaTysSmMgPy5Kmhb/+N106I3KlurgK52iZbGwEe23ZbVTolZQPcHDpqjqTJMm1Z29uYKzKNKznrSuAevs+AGlA7Cm0f1jbp5+KVgRKX0IEAmO1Tt/5XGkQ8VDEUG7RN5EDWjnpJbdOpMZ4OI+gF8nYJDFj5sY/3wblh8Id/b5P+v8YTRmcSSQdToK0h+kMNySCqh2Yz2SYvVoEIa5E1Iog==~-1~-1~-1~-1~-1; Domain=.vanguard.com; Path=/; Expires=Tue, 06 Apr 2027 11:07:15 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=1A3765AE610FD71741373CE9B03E23AA~YAAQSSTDFxQ5TFCdAQAAD695Yh/SJGa/AEF8fjBwb0BmoLi3rwbB7MprRewOHpgFdLef5kmum9AvXV+AdDFdwtm9mc+MmI5kEjWeWMN/sQ1ixBS4scg0ceIHkXiLnJ8cvgpDLyAz+9f2YIbJef22VE28Gw8EmD5/u+zOcar9cDkD0BLBAgCEpDiBPUe67e2srs52PgZDgDImzGk9W/ZoGCoedGb2y0gSKTS4NPUlJzeKhdZ6fFsIAvLYcIURJ4dFQwmZ6LBoQMDxmesuzkPBLpzucxlzEFk0d+5LxczM1TfPEBX2wFujHC4VYZzSBTKRJ9NdAya4TidXmjsU4bPCJawcerB/ZKUtpG1qBh2L8POnkCnYN2tCAIUF0/pcZOjCq5DnGJg=~4339778~3225141; Domain=.vanguard.com; Path=/; Expires=Mon, 06 Apr 2026 15:07:14 GMT; Max-Age=14399