If you've landed on holdings.web.vanguard.com, you're looking at a redirect subdomain that belongs to Vanguard, one of the largest investment management companies in the world. The page itself doesn't host any content — it immediately sends you to the main Vanguard website. That's a strong sign of legitimacy. For a finance site, you'd expect solid security and a clear ownership trail, and both are present here. The subdomain has a valid SSL certificate, enforces HTTPS, and has been around for years without any blacklisting or security flags. While the subdomain doesn't have its own contact page or privacy policy, those are all on the main Vanguard site, which is the real destination. So if you're wondering whether holdings.web.vanguard.com is a scam, the answer is no. It's a straightforward redirect to a trusted financial institution. Just be aware that after the redirect, you are on the official Vanguard.com — treat it as you would any bank or brokerage site.
In plain English
This is a legitimate redirect subdomain owned by Vanguard, the well-known investment firm. The site is secure, has a clean reputation, and immediately sends you to the official Vanguard website. It's safe to use.
Where the score comes from
Strong security setup: valid certificate, enforced HTTPS, and a modern TLS connection. The site is served through AWS CloudFront, which adds a layer of infrastructure protection. Nothing here raises concern.
WHOIS is not available for this subdomain, which is perfectly normal. The site redirects to vanguard.com, a well-known financial institution. The identity is effectively that of Vanguard, a major company with a long history.
Clean record: no blacklists, no Google security warnings, and a Wayback Machine history going back four years. The redirect to the main Vanguard site reinforces the trustworthiness.
The subdomain itself lacks contact info, an about page, or social links. For a redirect page that immediately sends you to the main Vanguard site, this is expected. The main site is fully transparent.
No privacy policy or terms of service on this subdomain, but that's standard for a redirect. The main Vanguard site has all required legal pages. No compliance gap for a redirect.
Solid infrastructure: fast page load, proper DNS resolution, and a CDN. The site doesn't handle email, which is fine for a redirect. DNSSEC is not enabled, but that's a minor point.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →