What does rakuten-sec.co.jp track?

Before any consent, rakuten-sec.co.jp loaded 5 tracking companies and set 3 advertising or analytics cookies.

That's more tracking companies than 78% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.rakuten-sec.co.jp once and clicking nothing. How we scan

Consent banner

No known consent management platform was detected on the page.

14 of the 22 companies it contacted before consent were unclassified.

Microsoft Advertising
bat.bing.com, bat.bing.net
11 requestsAdvertising
Google Ads
www.googleadservices.com, googleads.g.doubleclick.net, ad.doubleclick.net
5 requestsAdvertising
Yahoo Japan
apm.yahoo.co.jp, s.yimg.jp, b99.yahoo.co.jp
4 requestsAdvertising
Google Analytics
www.googletagmanager.com
7 requestsAnalytics
Mouseflow
cdn.mouseflow.com
1 requestAnalytics

karte.io
static.karte.io, cdn-edge.karte.io, cdn-issues.karte.io, b.karte.io
13 requestsUnclassified
ismcdn.jp
m-rakuten.ismcdn.jp
5 requestsUnclassified
rakuten.net
search-analytics.cxd.rakuten.net, smart-ad.cxd.rakuten.net
4 requestsUnclassified
marsflag.com
c.marsflag.com
3 requestsUnclassified
rakuten-static.com
jp.rakuten-static.com
3 requestsUnclassified
fraud-alert.net
static.fraud-alert.net, stp.fraud-alert.net
2 requestsUnclassified
placehold.jp
placehold.jp
1 requestUnclassified
trkd-asia.com
www.trkd-asia.com
1 requestUnclassified
yjtag.jp
s.yjtag.jp
1 requestUnclassified
rentracks.jp
www.rentracks.jp
1 requestUnclassified
csolution.jp
tk.csolution.jp
1 requestUnclassified
a-mpd.com
a-mpd.com
1 requestUnclassified
ddli.jp
a.ddli.jp
1 requestUnclassified
karte-edge.io
ktid.karte-edge.io
1 requestUnclassified
Google
www.google.com
7 requestsFunctional
Rakuten
rmc-cx.api.rakuten.co.jp, cdn.rmc.contents.rakuten.co.jp, rat.rakuten.co.jp, grp01.xd.rakuten.co.jp
22 requestsContent delivery
Cloudflare
cdnjs.cloudflare.com
1 requestContent delivery

The longest-lived tracking cookie it set was _pk_id.1987373560.4687, lasting about 13 months.

Cookie	Purpose	Set by	Lasts
_gcl_au	Advertising	rakuten-sec.co.jp	3 months
_pk_id.1987373560.4687	Analytics	www.rakuten-sec.co.jp	13 months
_pk_ses.1987373560.4687	Analytics	www.rakuten-sec.co.jp	Under a day
_gcl_securities_general_trueview_au	Unclassified	rakuten-sec.co.jp	3 months
_ra	Unclassified	rakuten-sec.co.jp	13 months
_yjsu_yjad	Unclassified	rakuten-sec.co.jp	12 months
caulisCookie	Unclassified	fraud-alert.net (third party)	12 months
caulissid	Unclassified	rakuten-sec.co.jp	Session
ct1	Unclassified	rakuten-sec.co.jp	12 months
krt-lv-ss	Unclassified	rakuten-sec.co.jp	Under a day
krt.vis	Unclassified	rakuten-sec.co.jp	13 months
rat_v	Unclassified	rakuten.co.jp (third party)	Under a day
rcx	Unclassified	www.rakuten-sec.co.jp	13 months
rcxGlobal	Unclassified	rakuten.co.jp (third party)	12 months
Rp	Unclassified	rakuten.co.jp (third party)	13 months
rt_session_id	Unclassified	rakuten-sec.co.jp	Under a day
rt_storage_writable	Unclassified	rakuten-sec.co.jp	1 day
rt_user_id	Unclassified	rakuten-sec.co.jp	13 months

The page also wrote 15 keys to local storage, which works like a cookie but isn't sent with requests.

How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.