container audit

GTM-NMK6VH4D

This container is published but empty — no tags, so nothing fires.

Tags0

Custom scripts0

Third parties0

Delivered315 KB

Versions1

What we observed

A real browser loaded fatface.com a month ago and recorded every request it made. This is what happened, as distinct from what the container is configured to do. It is one page load — anything that fires only deeper in the site did not fire here.

Container loaded from googletagmanager.com — Google

Measurement sent to tags.fatface.com — not Google

Measurement is first-party; the container still loads from Google. These are separate decisions, and this is the more common of the two.

Forwarded to GA4 ×6 — read from the measurement id, not the hostname

Consent OneTrust answered its own API. Measurement fired beforehand but carried no identifier — analytics_storage was denied, which is Consent Mode working as designed rather than a gap. 10 hosts appeared only after consent was granted. Google recorded gcs=G100 (all denied).

Third parties contacted 25 hosts — cdn.cookielaw.org, static.queue-it.net, xcdn.next.co.uk, cms.platform.next, geolocation.onetrust.com, static.platform.next, api.e1.nextdirect.com, assets.queue-it.net, and 17 more

dataLayer events seen siteDetails, gtm.js, OneTrustLoaded, OptanonLoaded, CookieManager.ProcessCookies, UserConsentChangeNotification.FunctionalEnabled, gtm.dom, gtm.elementVisibility, bloomreach, banner_impression, gtm.load, NotifyGoogleAnalytics.BannerShown, +4 more

Where the data goes

Confirmed — a browser watched this site send measurement data to tags.fatface.com, not to Google. observed on fatface.com More info »

Findings

Ordered by consequence. review has a concrete cost when it bites; info is real but depends on your setup. Seen is how common it is across the containers we have measured — reported separately on purpose, because common and harmless are different claims.

No findings were raised for this container.

Third parties it can reach

Each host is a party that can execute code or receive data in a visitor's browser. Follow one to see who else loads it. More info »

No third-party hosts were found in this container's tags.

Detected on

Sites observed loading this container. A container used across many hosts is a shared template; one on a single host is a bespoke build. Follow a site to see every container it loads.

fatface.com

What this audit describes

Containers change. These findings describe one specific artifact, and you can re-fetch it to check this reading.

Container	`GTM-NMK6VH4D`
Published version	`1` — the identity of this configuration. It changes only when someone publishes.
Read at	2026-08-22 10:29:21 UTC (a month ago)
Source	`https://www.googletagmanager.com/gtm.js?id=GTM-NMK6VH4D`
Body checksum	`e947cdb4275c4ff51ee2b0f74b2a2c2880b2ad8a23a46fd0fbdfa9b11d750f93` Evidence of the exact bytes we read, not an identity: Google varies the response per request, so re-fetching an unchanged container yields a different checksum. Compare the published version instead.

Re-audit

This reading is from a month ago. A container can be republished at any time, and nothing here updates on its own — a fresh read is the only way to know whether it still says this. Running it again replaces this page in place, so the link keeps working.

Re-audit GTM-NMK6VH4D

Check another container

Put this container under version control. Tagora exports it to a repository you own, so every change arrives as a pull request. How it works »