Scan-Fakten als JSON anzeigen
{
"schema": "https://saferpage.de/schemas/public-scan-facts.v1",
"claim_boundary": "Öffentliche Rohdaten enthalten nur Scan-Fakten, Statuswerte, Evidence-Grenzen und feste Detail-/Hintergrund-Links. Betreiber-Hintergrund, Planungen, Checklisten, Code und allgemeine Empfehlungen sind ausgelagert.",
"current_evidence_policy": {
"schema": "https://saferpage.de/schemas/public-scan-current-evidence-policy.v1",
"status": "current_scan_fields_only",
"summary": "Der Fakten-JSON exportiert nur Felder, die im gespeicherten aktuellen Scan wirklich vorhanden sind. Fehlende neue Evidence wird nicht aus alten Testergebnisformaten nachgebaut.",
"guardrails": [
"Keine synthetischen Boundary-Fallbacks fuer alte Scans",
"Keine Nachbewertung alter Testergebnisse im Fakten-JSON",
"Keine Betreiber-Empfehlung im Testresult-JSON"
]
},
"host": "candyandmore.de",
"normalized_url": "https://candyandmore.de/",
"score": 0,
"verdict": {
"color": "red",
"label": "riskant",
"score": 0
},
"scan_id": "f7d242be-d6ba-4fbc-9786-e218fb05c7e0",
"created_at": "2026-06-15 05:29:37.614946+02",
"evidence": {
"dns": {
"ok": true,
"addresses": [
"104.26.12.214",
"104.26.13.214",
"172.67.70.141",
"2606:4700:20::681a:cd6",
"2606:4700:20::681a:dd6",
"2606:4700:20::ac43:468d"
],
"duration_ms": 33
},
"tls": {
"ok": true,
"cipher": "TLS_AES_256_GCM_SHA384",
"issuer": [
[
[
"countryName",
"US"
]
],
[
[
"organizationName",
"Google Trust Services"
]
],
[
[
"commonName",
"WE1"
]
]
],
"subject": [
[
[
"commonName",
"candyandmore.de"
]
]
],
"version": "TLSv1.3",
"not_after": "Jul 25 05:12:16 2026 GMT",
"hostname_matches": true,
"days_until_expiry": 40,
"subject_alt_names": [
"candyandmore.de",
"*.candyandmore.de"
],
"issuer_common_name": "WE1"
},
"http": {
"ok": true,
"status": 200,
"headers": {
"nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
"date": "Mon, 15 Jun 2026 03:29:25 GMT",
"vary": "Accept-Encoding",
"cf-ray": "a0be7d846dcf54eb-FRA",
"server": "cloudflare",
"alt-svc": "h3=\":443\"; ma=86400",
"expires": "Mon, 15 Jun 2026 03:29:25 GMT",
"report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2B7kfn%2B8Afr69xkZayB6RWcIwIvanjRkAtjETRugFc2wFhOB6r6SdnwT6VCwwqR1%2Bcghkku9yJwMiIy6hFogqF9n%2BL8iJsUXKaTS%2BTliUYOOOUhlY24kuzZ6GqpGpHipYD1O0%2F%2BOK7wSg%2FsaqrU0r4Q%3D\"}]}",
"connection": "close",
"set-cookie": "language=0; path=/; secure; HttpOnly",
"content-type": "text/html; charset=UTF-8",
"cache-control": "max-age=0",
"server-timing": "cfEdge;dur=10,cfOrigin;dur=277",
"cf-cache-status": "DYNAMIC",
"x-frame-options": "sameorigin",
"speculation-rules": "\"/cdn-cgi/speculation\"",
"transfer-encoding": "chunked"
},
"body_size": 200000,
"final_url": "https://www.candyandmore.de/",
"duration_ms": 418
},
"scanner": {
"bot_url": "https://saferpage.de/bot",
"context": "manual",
"user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)",
"default_user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)"
},
"domain_records": {
"mx": true,
"caa": false,
"spf": true,
"dmarc": true,
"dnssec": false
},
"googlebot_http": {
"ok": true,
"status": 200,
"headers": {
"nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
"date": "Mon, 15 Jun 2026 03:29:25 GMT",
"vary": "Accept-Encoding",
"cf-ray": "a0be7d86cb4d35ea-FRA",
"server": "cloudflare",
"alt-svc": "h3=\":443\"; ma=86400",
"expires": "Mon, 15 Jun 2026 03:29:25 GMT",
"report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2m%2BJC98GpH4haE2FYSTpY4SFaI3mDwJpsZ6CJ%2Bjg1Asyofe9ucqEgpHqwOZfwkV%2FSaolrY4BQK05rtR6eMLKQ4bNjCp%2BYr5jLt2OfmtNQTgD%2BAqulESyKZpu7yErU6NASGarcQBhDfT%2BtmkIRMcA3bE%3D\"}]}",
"connection": "close",
"set-cookie": "language=0; path=/; secure; HttpOnly",
"content-type": "text/html; charset=UTF-8",
"cache-control": "max-age=0",
"server-timing": "cfEdge;dur=17,cfOrigin;dur=215",
"cf-cache-status": "DYNAMIC",
"x-frame-options": "sameorigin",
"speculation-rules": "\"/cdn-cgi/speculation\"",
"transfer-encoding": "chunked"
},
"body_size": 200000,
"final_url": "https://www.candyandmore.de/",
"duration_ms": 329
},
"ai_search_policy_evidence": {
"files": [
{
"id": "robots_txt",
"url": "https://www.candyandmore.de/robots.txt",
"label": "robots.txt",
"reason": "",
"status": "found",
"body_size": 1845,
"truncated": false,
"body_sha256": "ff7c150fdc716cec5d28e9994e21328d259b2c15765632cd968665aef3916966",
"duration_ms": 63,
"http_status": 200,
"ai_bot_policy": {
"bot_directives": [],
"explicit_ai_bots": [],
"explicit_ai_bot_count": 0,
"wildcard_directive_count": 62,
"wildcard_directives_sample": [
{
"value": "/admin/",
"directive": "disallow"
},
{
"value": "/Core/",
"directive": "disallow"
},
{
"value": "/tmp/",
"directive": "disallow"
},
{
"value": "/views/",
"directive": "disallow"
},
{
"value": "/Setup/",
"directive": "disallow"
},
{
"value": "/log/",
"directive": "disallow"
},
{
"value": "/public/",
"directive": "disallow"
},
{
"value": "/newsletter/",
"directive": "disallow"
}
]
},
"relevant_lines": [
"User-agent: Amazonbot",
"Disallow: /",
"User-agent: *",
"Disallow: /admin/",
"Disallow: /Core/",
"Disallow: /tmp/",
"Disallow: /views/",
"Disallow: /Setup/",
"Disallow: /log/",
"Disallow: /public/",
"Disallow: /newsletter/",
"Disallow: /en/newsletter/",
"Disallow: /index.php?cl=newsletter",
"Disallow: /AGB/",
"Disallow: /en/Terms-and-Conditions/",
"Disallow: /warenkorb/"
]
},
{
"id": "llms_txt",
"url": "https://www.candyandmore.de/llms.txt",
"label": "llms.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 75,
"http_status": 301,
"relevant_lines": []
},
{
"id": "ai_txt",
"url": "https://www.candyandmore.de/.well-known/ai.txt",
"label": "AI Policy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 60,
"http_status": 301,
"relevant_lines": []
},
{
"id": "ai_policy_txt",
"url": "https://www.candyandmore.de/.well-known/ai-policy.txt",
"label": "AI Policy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 73,
"http_status": 301,
"relevant_lines": []
},
{
"id": "ward_txt",
"url": "https://www.candyandmore.de/.well-known/ward.txt",
"label": "WARD Policy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 67,
"http_status": 301,
"relevant_lines": []
}
],
"origin": "https://www.candyandmore.de",
"schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 5,
"found_file_count": 1,
"policy_file_count": 0,
"explicit_ai_bot_count": 0
},
"summary": "1 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
"available": true,
"guardrails": [
"Nur feste Same-Origin-Policy-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"known_ai_bots": [
"GPTBot",
"ChatGPT-User",
"Google-Extended",
"ClaudeBot",
"PerplexityBot",
"CCBot"
],
"explicit_ai_bots": [],
"policy_file_count": 0,
"llms_ward_policy_status": "not_publicly_verified",
"robots_ai_policy_status": "generic_robots_policy"
},
"adtech_transparency_evidence": {
"files": [
{
"id": "ads_txt",
"url": "https://www.candyandmore.de/ads.txt",
"label": "ads.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 76,
"http_status": 301,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "app_ads_txt",
"url": "https://www.candyandmore.de/app-ads.txt",
"label": "app-ads.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 60,
"http_status": 301,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "sellers_json",
"url": "https://www.candyandmore.de/sellers.json",
"label": "sellers.json",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 61,
"http_status": 301,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
}
],
"origin": "https://www.candyandmore.de",
"schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 3,
"direct_count": 0,
"reseller_count": 0,
"found_file_count": 0,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"summary": "0 von 3 AdTech-Transparenzdatei(en) gefunden; 0 DIRECT- und 0 RESELLER-Zeile(n).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-AdTech-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status, Zähler und kurze relevante Zeilen"
],
"direct_count": 0,
"ads_txt_found": false,
"reseller_count": 0,
"app_ads_txt_found": false,
"sellers_json_found": false,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"sellers_json_parse_ok": false,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"security_trust_policy_evidence": {
"files": [
{
"id": "security_txt",
"url": "https://www.candyandmore.de/.well-known/security.txt",
"label": "security.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 73,
"http_status": 301,
"relevant_lines": [],
"security_txt_policy": []
},
{
"id": "security_txt_legacy",
"url": "https://www.candyandmore.de/security.txt",
"label": "security.txt legacy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 65,
"http_status": 301,
"relevant_lines": [],
"security_txt_policy": []
}
],
"origin": "https://www.candyandmore.de",
"schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 2,
"field_count": 0,
"contact_count": 0,
"found_file_count": 0,
"preferred_well_known_found": 0
},
"summary": "0 von 2 security.txt-Ziel(en) gefunden; 0 Kontaktfeld(er), 0 strukturierte Feld(er).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-security.txt-Ziele",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"field_count": 0,
"contact_count": 0,
"fields_present": [],
"policy_present": false,
"expires_present": false,
"encryption_present": false,
"security_txt_found": false,
"preferred_well_known_found": false
}
},
"findings": [
{
"id": "hidden_text",
"title": "Versteckter Text erkannt",
"public": true,
"audience": "nutzer",
"category": "seo",
"severity": "warning",
"user_importance": 128,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "pre_consent_nonessential_cookies",
"title": "Möglicherweise nicht notwendige Cookies vor Einwilligung",
"public": true,
"cookies": [
"language"
],
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 127,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "payment_without_clear_operator",
"title": "Zahlungs-/Shop-Signal ohne klare Betreibertransparenz",
"public": true,
"audience": "nutzer",
"category": "data_entry",
"severity": "warning",
"user_importance": 126,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "imprint_missing",
"title": "Kein Impressum-Link erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 125,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "data_entry_privacy_context_missing",
"title": "Dateneingabe ohne klaren Datenschutzkontext",
"public": true,
"audience": "nutzer",
"category": "data_entry",
"severity": "warning",
"user_importance": 122,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "third_party_page_url_parameter",
"count": 2,
"title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 118,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "login_without_clear_privacy_context",
"title": "Login-Felder ohne klaren Datenschutzkontext",
"public": true,
"audience": "nutzer",
"category": "data_entry",
"severity": "warning",
"user_importance": 118,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "pii_tracking_on_data_entry_page",
"title": "Dateneingabe und datenschutzrelevante Drittanbieter im selben Browseraufruf",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 118,
"importance_label": "Wichtig für Nutzer",
"third_party_count": 1
},
{
"id": "external_canonical",
"title": "Canonical zeigt auf fremde Domain",
"public": true,
"audience": "nutzer",
"category": "seo",
"severity": "warning",
"canonical_url": "https://www.candyandmore.de/",
"user_importance": 118,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "gpc_privacy_domains_present",
"count": 1,
"title": "Datenschutzrelevante Kontakte trotz GPC-Signal",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"user_importance": 116,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "beacon_api_usage",
"count": 3,
"title": "Beacon-/Keepalive-Telemetrie erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 116,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "operator_contact_missing",
"title": "Keine klare Kontaktmöglichkeit erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 116,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "privacy_policy_provider_disclosure_gap",
"title": "Erkannte Anbieter fehlen in der Datenschutzerklärung",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 116,
"importance_label": "Wichtig für Nutzer",
"missing_providers": [
"Cloudflare Web Analytics"
]
},
{
"id": "external_link_spam",
"title": "Sehr viele externe Links erkannt",
"public": true,
"audience": "nutzer",
"category": "seo",
"severity": "warning",
"user_importance": 116,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "consent_state_gpc_evidence_review",
"title": "Consent-Zustand: GPC mit Tracking-Hinweisen",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"user_importance": 112,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "browser_keystroke_listener_signals",
"count": 9,
"title": "Viele Tastatur-/Eingabe-Listener im Browser erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"user_importance": 110,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "cookie_missing_samesite",
"title": "Cookie ohne SameSite-Attribut",
"public": true,
"cookies": [
"language"
],
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"user_importance": 98,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "sampled_form_privacy_context_missing",
"title": "Formular-Unterseite ohne klaren Datenschutzkontext",
"public": true,
"audience": "nutzer",
"category": "crawl",
"severity": "warning",
"user_importance": 96,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "important_pages_not_discovered",
"title": "Wichtige Betreiberseiten nicht vollständig in der Linkstruktur gefunden",
"public": true,
"audience": "nutzer",
"category": "crawl",
"severity": "warning",
"user_importance": 88,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "button_name_missing",
"count": 1,
"title": "Buttons ohne erkennbaren Namen",
"public": true,
"audience": "nutzer",
"category": "accessibility",
"severity": "warning",
"user_importance": 86,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "image_alt_missing",
"count": 8,
"title": "Bilder ohne Alternativtext",
"public": true,
"audience": "nutzer",
"category": "accessibility",
"severity": "info",
"user_importance": 82,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "missing_hsts",
"title": "HSTS fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 78,
"importance_label": "Technischer Hinweis"
},
{
"id": "cmp_api_not_detected",
"title": "Keine gängige CMP-/TCF-API im Browser erkannt",
"public": true,
"audience": "betreiber",
"category": "privacy",
"severity": "info",
"user_importance": 74,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_csp",
"title": "Content-Security-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 72,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_x_content_type_options",
"title": "X-Content-Type-Options fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"user_importance": 70,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_embedder_policy",
"title": "Cross-Origin-Embedder-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 68,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_opener_policy",
"title": "Cross-Origin-Opener-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 66,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_resource_policy",
"title": "Cross-Origin-Resource-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 64,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_referrer_policy",
"title": "Referrer-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 40,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_permissions_policy",
"title": "Permissions-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"user_importance": 40,
"importance_label": "Technischer Hinweis"
},
{
"id": "browser_privacy_relevant_third_parties",
"title": "Datenschutzrelevante Drittanbieter im Browseraufruf",
"public": true,
"audience": "betreiber",
"category": "privacy",
"severity": "info",
"user_importance": 30,
"importance_label": "Technischer Hinweis"
}
],
"audit_modules": [
{
"id": "forms_payments",
"color": "red",
"score": 25,
"title": "Formulare, Login & Zahlung",
"source": "HTML-Formulare, Eingabefelder, Zahlungsanbieter und Kontextlinks",
"status": "kritisch",
"evidence": "Aus diesem Rohfeld wird im Testresult keine zusätzliche Scan-Feststellung abgeleitet; Betreiberkontext und Umsetzungshinweise sind ausgelagert."
},
{
"id": "operator_transparency",
"color": "red",
"score": 25,
"title": "Impressum, Kontakt & Datenschutzerklärung",
"source": "Deutschsprachige Betreiber- und Datenschutzhinweis-Erkennung",
"status": "kritisch",
"evidence": "Impressum: nein, Datenschutz: nein, Kontakt: nein."
},
{
"id": "seo_integrity",
"color": "red",
"score": 46,
"title": "SEO-Integrität & Cloaking",
"source": "HTML-Inhalt, strukturierte Daten, Links und Googlebot-Vergleich",
"status": "kritisch",
"evidence": "3 SEO-Spam-Hinweis(e), 0 Cloaking-Hinweis(e)."
},
{
"id": "security_tls",
"color": "red",
"score": 46,
"title": "Sicherheit, TLS & Header",
"source": "DNS, TLS, HTTP-Status, Zertifikat und Security-Header",
"status": "kritisch",
"evidence": "1 Infrastruktur-Hinweis(e), Security-Header: 1/9 vorhanden, 8 fehlen, externe Skript-Hosts: 0."
},
{
"id": "site_coverage",
"color": "red",
"score": 47,
"title": "Seitenabdeckung & Crawl",
"source": "Startseiten-Links, Compliance-Links und begrenzter interner Zusatzabruf",
"status": "kritisch",
"evidence": "30 interne Linkziele erkannt, 4 priorisierte Unterseite(n) abgerufen."
},
{
"id": "accessibility_usability",
"color": "orange",
"score": 60,
"title": "Barrierefreiheit & Usability",
"source": "Passives HTML-Sample: Bilder, Formulare, Buttons, Sprache, Headings und Viewport",
"status": "auffällig",
"evidence": "8 Bild(er) ohne alt, 0 Formularfeld(er) ohne Beschriftung, 1 Button(s) ohne Namen."
},
{
"id": "browser_evidence",
"color": "orange",
"score": 64,
"title": "Browser-Nachweis",
"source": "Headless Chromium mit Screenshot- und Request-Telemetrie",
"status": "auffällig",
"evidence": "45 Request(s), 2 Drittanbieter-Domain(s), davon 1 datenschutzrelevant, 1 Browser-Cookie(s), Transfer-Prüfbedarf: 0, Referrer-/URL-Leaks: 1, Fingerprinting-/Replay-Hinweise: 1."
},
{
"id": "privacy_consent",
"color": "orange",
"score": 65,
"title": "Datenschutz, Cookies & Consent",
"source": "Browser, HTTP-Header, HTML und Consent-/Cookie-Heuristik",
"status": "auffällig",
"evidence": "0 Tracking-Script(s), 1 Cookie(s) vor Einwilligung, 0 Tracking-Cookie(s), Ablehnen-Option: ja, Consent-Audit: 90."
},
{
"id": "tracking_pixels_beacons",
"color": "orange",
"score": 72,
"title": "Tracking-Pixel & Beacons",
"source": "HTML-Pixel, Link-Ping-Attribute, Chromium-Requests und Browser-API-Instrumentierung",
"status": "auffällig",
"evidence": "0 Pixel-/Bildtracking-Hinweis(e), 3 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s)."
},
{
"id": "referrer_url_leaks",
"color": "yellow",
"score": 76,
"title": "Referrer & URL-Leaks",
"source": "Chromium-Request-Telemetrie ohne gespeicherte Parameterwerte",
"status": "prüfen",
"evidence": "1 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 0 sensible Query-Kontexte."
},
{
"id": "google_third_parties",
"color": "green",
"score": 100,
"title": "Google-Dienste & Drittanbieter",
"source": "Chromium-Requests, Anbieterklassifikation und Google Consent Mode Heuristik",
"status": "unauffällig",
"evidence": "Keine Google-Domain, keine Google-Tracking-ID und keine datenschutzrelevanten Drittanbieter im passiven Check erkannt."
},
{
"id": "pii_exposure",
"color": "yellow",
"score": 82,
"title": "PII, URL-Parameter & Datenleck-Schutz",
"source": "URL-Parameter, interne Links, HTML-Formulare, Browser-Drittanbieter und Dateneingabe-Kontext",
"status": "prüfen",
"evidence": "1 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext."
},
{
"id": "consent_journey",
"color": "green",
"score": 92,
"title": "Consent-Journey-Matrix",
"source": "Chromium-Zustände: Erstaufruf, Reject, Accept und GPC",
"status": "unauffällig",
"evidence": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 1 im GPC-Aufruf."
},
{
"id": "cookie_inventory",
"color": "green",
"score": 100,
"title": "Cookie-Inventar",
"source": "HTTP-Set-Cookie und Chromium-Cookies beim ersten Seitenaufruf",
"status": "unauffällig",
"evidence": "1 Cookie(s), 0 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 0 langlebig, 0 sehr lang."
},
{
"id": "embedded_content",
"color": "green",
"score": 100,
"title": "Externe Inhalte & Widgets",
"source": "HTML-Embeds und Chromium-Drittanbieter-Requests",
"status": "unauffällig",
"evidence": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen."
},
{
"id": "script_supply_chain",
"color": "green",
"score": 100,
"title": "Externe Skripte & SRI",
"source": "HTML-Script-Tags, Anbieterklassifikation und SRI-Attribute",
"status": "unauffällig",
"evidence": "0 externe Skript(e) von 0 Host(s), 0 ohne SRI, 0 Tracking-/Tag-nahe Skript(e)."
},
{
"id": "performance_mobile",
"color": "green",
"score": 100,
"title": "Performance & mobile Nutzbarkeit",
"source": "HTTP-Antwort, HTML-Größe, Komprimierung und mobile Basis",
"status": "unauffällig",
"evidence": "Performance-Score 100, Antwortzeit 418 ms."
}
],
"ai_search_policy_evidence": {
"files": [
{
"id": "robots_txt",
"url": "https://www.candyandmore.de/robots.txt",
"label": "robots.txt",
"reason": "",
"status": "found",
"body_size": 1845,
"truncated": false,
"body_sha256": "ff7c150fdc716cec5d28e9994e21328d259b2c15765632cd968665aef3916966",
"duration_ms": 63,
"http_status": 200,
"ai_bot_policy": {
"bot_directives": [],
"explicit_ai_bots": [],
"explicit_ai_bot_count": 0,
"wildcard_directive_count": 62,
"wildcard_directives_sample": [
{
"value": "/admin/",
"directive": "disallow"
},
{
"value": "/Core/",
"directive": "disallow"
},
{
"value": "/tmp/",
"directive": "disallow"
},
{
"value": "/views/",
"directive": "disallow"
},
{
"value": "/Setup/",
"directive": "disallow"
},
{
"value": "/log/",
"directive": "disallow"
},
{
"value": "/public/",
"directive": "disallow"
},
{
"value": "/newsletter/",
"directive": "disallow"
}
]
},
"relevant_lines": [
"User-agent: Amazonbot",
"Disallow: /",
"User-agent: *",
"Disallow: /admin/",
"Disallow: /Core/",
"Disallow: /tmp/",
"Disallow: /views/",
"Disallow: /Setup/",
"Disallow: /log/",
"Disallow: /public/",
"Disallow: /newsletter/",
"Disallow: /en/newsletter/",
"Disallow: /index.php?cl=newsletter",
"Disallow: /AGB/",
"Disallow: /en/Terms-and-Conditions/",
"Disallow: /warenkorb/"
]
},
{
"id": "llms_txt",
"url": "https://www.candyandmore.de/llms.txt",
"label": "llms.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 75,
"http_status": 301,
"relevant_lines": []
},
{
"id": "ai_txt",
"url": "https://www.candyandmore.de/.well-known/ai.txt",
"label": "AI Policy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 60,
"http_status": 301,
"relevant_lines": []
},
{
"id": "ai_policy_txt",
"url": "https://www.candyandmore.de/.well-known/ai-policy.txt",
"label": "AI Policy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 73,
"http_status": 301,
"relevant_lines": []
},
{
"id": "ward_txt",
"url": "https://www.candyandmore.de/.well-known/ward.txt",
"label": "WARD Policy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 67,
"http_status": 301,
"relevant_lines": []
}
],
"origin": "https://www.candyandmore.de",
"schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 5,
"found_file_count": 1,
"policy_file_count": 0,
"explicit_ai_bot_count": 0
},
"summary": "1 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
"available": true,
"guardrails": [
"Nur feste Same-Origin-Policy-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"known_ai_bots": [
"GPTBot",
"ChatGPT-User",
"Google-Extended",
"ClaudeBot",
"PerplexityBot",
"CCBot"
],
"explicit_ai_bots": [],
"policy_file_count": 0,
"llms_ward_policy_status": "not_publicly_verified",
"robots_ai_policy_status": "generic_robots_policy"
},
"adtech_transparency_evidence": {
"files": [
{
"id": "ads_txt",
"url": "https://www.candyandmore.de/ads.txt",
"label": "ads.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 76,
"http_status": 301,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "app_ads_txt",
"url": "https://www.candyandmore.de/app-ads.txt",
"label": "app-ads.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 60,
"http_status": 301,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "sellers_json",
"url": "https://www.candyandmore.de/sellers.json",
"label": "sellers.json",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 61,
"http_status": 301,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
}
],
"origin": "https://www.candyandmore.de",
"schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 3,
"direct_count": 0,
"reseller_count": 0,
"found_file_count": 0,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"summary": "0 von 3 AdTech-Transparenzdatei(en) gefunden; 0 DIRECT- und 0 RESELLER-Zeile(n).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-AdTech-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status, Zähler und kurze relevante Zeilen"
],
"direct_count": 0,
"ads_txt_found": false,
"reseller_count": 0,
"app_ads_txt_found": false,
"sellers_json_found": false,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"sellers_json_parse_ok": false,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"security_trust_policy_evidence": {
"files": [
{
"id": "security_txt",
"url": "https://www.candyandmore.de/.well-known/security.txt",
"label": "security.txt",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 73,
"http_status": 301,
"relevant_lines": [],
"security_txt_policy": []
},
{
"id": "security_txt_legacy",
"url": "https://www.candyandmore.de/security.txt",
"label": "security.txt legacy",
"reason": "redirect_blocked",
"status": "not_available",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 65,
"http_status": 301,
"relevant_lines": [],
"security_txt_policy": []
}
],
"origin": "https://www.candyandmore.de",
"schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 2,
"field_count": 0,
"contact_count": 0,
"found_file_count": 0,
"preferred_well_known_found": 0
},
"summary": "0 von 2 security.txt-Ziel(en) gefunden; 0 Kontaktfeld(er), 0 strukturierte Feld(er).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-security.txt-Ziele",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"field_count": 0,
"contact_count": 0,
"fields_present": [],
"policy_present": false,
"expires_present": false,
"encryption_present": false,
"security_txt_found": false,
"preferred_well_known_found": false
},
"site_coverage_analysis": {
"color": "red",
"pages": [
{
"url": "https://www.candyandmore.de/Cookie-Hinweis",
"path": "/Cookie-Hinweis",
"text": "hier",
"source": "homepage_link",
"category": "cookies",
"priority": 86
},
{
"url": "https://www.candyandmore.de/Damhert-Framboise-Cookies-sugarfree.html",
"path": "/Damhert-Framboise-Cookies-sugarfree.html",
"text": "",
"source": "homepage_link",
"category": "cookies",
"priority": 86
},
{
"url": "https://www.candyandmore.de/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"path": "/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"text": "",
"source": "homepage_link",
"category": "cookies",
"priority": 86
},
{
"url": "https://www.candyandmore.de/index.php",
"path": "/index.php",
"text": "Mein Konto",
"source": "homepage_link",
"category": "login",
"priority": 72
},
{
"url": "https://www.candyandmore.de/Schokoladiges/Schokolade/Schokoladentafeln/Marabou",
"path": "/Schokoladiges/Schokolade/Schokoladentafeln/Marabou",
"text": "Marabou",
"source": "homepage_link",
"category": "newsletter",
"priority": 64
},
{
"url": "https://www.candyandmore.de/Balance",
"path": "/Balance",
"text": "Balance",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://www.candyandmore.de/Confiserie/Coppeneur",
"path": "/Confiserie/Coppeneur",
"text": "Coppeneur",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://www.candyandmore.de/Confiserie/Milka",
"path": "/Confiserie/Milka",
"text": "Milka",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://www.candyandmore.de/Confiserie/Pralinen/Ferrero",
"path": "/Confiserie/Pralinen/Ferrero",
"text": "Ferrero",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://www.candyandmore.de/Ernaehrungsbewusstes/Dextro-Energy",
"path": "/Ernaehrungsbewusstes/Dextro-Energy",
"text": "Dextro Energy",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://www.candyandmore.de/Ernaehrungsbewusstes/Gelatinefrei",
"path": "/Ernaehrungsbewusstes/Gelatinefrei",
"text": "Gelatinefrei",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
},
{
"url": "https://www.candyandmore.de/Ernaehrungsbewusstes/Laktosefrei",
"path": "/Ernaehrungsbewusstes/Laktosefrei",
"text": "Laktosefrei",
"source": "homepage_link+sitemap",
"category": "unterseite",
"priority": 24
}
],
"score": 47,
"status": "kritisch",
"summary": "30 interne Linkziele erkannt (120 aus Sitemap), 4 priorisierte Unterseite(n) zusätzlich abgerufen.",
"findings": [
{
"id": "important_pages_not_discovered",
"title": "Wichtige Betreiberseiten nicht vollständig in der Linkstruktur gefunden",
"public": true,
"category": "crawl",
"severity": "warning"
},
{
"id": "sampled_form_privacy_context_missing",
"title": "Formular-Unterseite ohne klaren Datenschutzkontext",
"public": true,
"category": "crawl",
"severity": "warning"
},
{
"id": "privacy_policy_provider_disclosure_gap",
"title": "Erkannte Anbieter fehlen in der Datenschutzerklärung",
"public": true,
"category": "privacy",
"severity": "warning",
"missing_providers": [
"Cloudflare Web Analytics"
]
}
],
"robots_ok": true,
"categories": {
"login": 1,
"cookies": 3,
"newsletter": 1,
"unterseite": 25
},
"sample_limit": 4,
"sampled_count": 4,
"sampled_pages": [
{
"ok": true,
"url": "https://www.candyandmore.de/Cookie-Hinweis",
"path": "/Cookie-Hinweis",
"audit": {
"form_count": 2,
"finding_ids": [
"pre_consent_nonessential_cookies",
"cookie_missing_samesite",
"operator_identity_unclear"
],
"cookie_count": 1,
"imprint_found": true,
"consent_hint_found": true,
"reject_option_found": true,
"privacy_policy_found": true,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 2,
"title": "Cookie-Hinweis | Candy And More",
"status": 200,
"category": "cookies",
"duration_ms": 253,
"privacy_hint": true,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://www.candyandmore.de/Damhert-Framboise-Cookies-sugarfree.html",
"path": "/Damhert-Framboise-Cookies-sugarfree.html",
"audit": {
"form_count": 8,
"finding_ids": [
"pre_consent_nonessential_cookies",
"cookie_missing_samesite",
"imprint_missing"
],
"cookie_count": 1,
"imprint_found": false,
"consent_hint_found": true,
"reject_option_found": true,
"privacy_policy_found": false,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 8,
"title": "Damhert Framboise Cookies sugarfree - zuckerfreies belgisches Gebäck in großer Auswahl Damhert Framboise Cookies sugarfr",
"status": 200,
"category": "cookies",
"duration_ms": 862,
"privacy_hint": false,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://www.candyandmore.de/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"path": "/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"audit": {
"form_count": 8,
"finding_ids": [
"pre_consent_nonessential_cookies",
"cookie_missing_samesite",
"imprint_missing"
],
"cookie_count": 1,
"imprint_found": false,
"consent_hint_found": true,
"reject_option_found": true,
"privacy_policy_found": false,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 8,
"title": "Diablo Cookies with Strawberry and Peanut Cream Coating No Sugar Added - große Auswahl an Gebäck ohne Zuckerzusatz Diabl",
"status": 200,
"category": "cookies",
"duration_ms": 1008,
"privacy_hint": false,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://www.candyandmore.de/index.php",
"path": "/index.php",
"audit": {
"form_count": 10,
"finding_ids": [
"pre_consent_nonessential_cookies",
"cookie_missing_samesite",
"imprint_missing",
"operator_contact_missing"
],
"cookie_count": 1,
"imprint_found": false,
"consent_hint_found": true,
"reject_option_found": true,
"privacy_policy_found": false,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 10,
"title": "Startseite | Süßigkeiten online kaufen bei Candy And More I Süßwaren Versand | Confiserie | Very British | Süßes",
"status": 200,
"category": "login",
"duration_ms": 270,
"privacy_hint": false,
"privacy_policy_audit": []
}
],
"robots_checked": true,
"sitemap_sources": [
"https://www.candyandmore.de/sitemap.xml",
"https://www.candyandmore.de/sitemaps/products_page_1.xml",
"https://www.candyandmore.de/sitemaps/categories_page_1.xml"
],
"sitemap_available": true,
"sitemap_url_count": 120,
"homepage_link_count": 367,
"internal_link_count": 30,
"privacy_policy_audit": [],
"sitemap_source_count": 3,
"provider_disclosure_audit": {
"color": "red",
"found": [],
"score": 0,
"checks": [
{
"id": "analytics_cloudflare_web_analytics",
"found": false,
"category": "analytics",
"evidence": [
"static.cloudflareinsights.com"
],
"keywords": [
"cloudflare",
"analytics",
"tracking",
"werbung"
],
"provider": "Cloudflare Web Analytics",
"category_label": "Analytics"
}
],
"reason": "no_policy_text",
"status": "kritisch",
"missing": [
"Cloudflare Web Analytics"
],
"summary": "1 technische Anbieter erkannt, aber keine Datenschutzerklärung im Sample ausgewertet.",
"available": true,
"missing_count": 1,
"detected_count": 1,
"mentioned_count": 0
},
"important_categories_found": [
"cookies"
],
"sampled_tracking_page_count": 0,
"sampled_form_privacy_gap_count": 3,
"sitemap_candidate_source_count": 1
},
"page_analysis": {
"h1": [],
"h2": [
"Frisch eingetroffen",
"Süße Favoriten"
],
"title": "Startseite | Süßigkeiten online kaufen bei Candy And More I Süßwaren Versand | Confiserie | Very British | Süßes",
"keywords": [
[
"schokolade",
10
],
[
"more",
9
],
[
"haribo",
9
],
[
"fruchtgummi",
8
],
[
"cadbury",
8
],
[
"lakritz",
8
],
[
"süße",
8
],
[
"kilogramm",
8
],
[
"informationen",
8
],
[
"candy",
7
]
],
"language": "de",
"description": "Candy And More - Der Süßigkeiten Online-Shop und Süßwarenversand für Spezialitäten aus aller Welt. Fruchtgummi von Haribo, Jelly Belly Beans aus USA, Süßes ohne Zuckerzusatz, Kinderartikel von Ferrero, Grußschokoladen von Meybona, Schokolade von Cadbury und Ritter Sport, Weingummi von Bassetts, Chips von Walkers, Lakritz von Red Band.",
"favicon_url": "https://www.candyandmore.de/out/wave/img/favicons/favicon_512x512.png",
"link_counts": {
"external": 0,
"internal": 367
},
"preview_image": "/cache/screenshots/candyandmore.de-160x150-5f9fa192eafdc6e7a9.png",
"screenshot_url": "/cache/screenshots/candyandmore.de-160x150-5f9fa192eafdc6e7a9.png",
"external_scripts": [],
"browser_final_url": "https://www.candyandmore.de/",
"meta_preview_image": "https://www.candyandmore.de/out/wave/img/basket.png",
"screenshot_renderer": "playwright-chromium",
"external_link_targets": []
},
"browser_analysis": {
"cookies": {
"items": [
{
"name": "language",
"domain": "www.candyandmore.de",
"secure": true,
"expires": -1,
"http_only": true,
"same_site": "Lax"
}
],
"total": 1,
"third_party": 0
},
"storage": {
"total": 1,
"local_storage_keys": [],
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_keys": [
"eyeAbleShow"
],
"session_storage_total": 1
},
"findings": [
{
"id": "browser_privacy_relevant_third_parties",
"title": "Datenschutzrelevante Drittanbieter im Browseraufruf",
"public": true,
"category": "privacy",
"severity": "info"
},
{
"id": "gpc_privacy_domains_present",
"count": 1,
"title": "Datenschutzrelevante Kontakte trotz GPC-Signal",
"public": true,
"category": "privacy",
"severity": "info"
},
{
"id": "cmp_api_not_detected",
"title": "Keine gängige CMP-/TCF-API im Browser erkannt",
"public": true,
"category": "privacy",
"severity": "info"
},
{
"id": "third_party_page_url_parameter",
"count": 2,
"title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
"public": true,
"category": "privacy",
"severity": "warning"
},
{
"id": "browser_keystroke_listener_signals",
"count": 9,
"title": "Viele Tastatur-/Eingabe-Listener im Browser erkannt",
"public": true,
"category": "privacy",
"severity": "info"
},
{
"id": "consent_state_gpc_evidence_review",
"title": "Consent-Zustand: GPC mit Tracking-Hinweisen",
"public": true,
"category": "privacy",
"severity": "info"
},
{
"id": "beacon_api_usage",
"count": 3,
"title": "Beacon-/Keepalive-Telemetrie erkannt",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"renderer": "playwright-chromium",
"final_url": "https://www.candyandmore.de/",
"consent_ui": {
"accept_controls": [],
"accept_max_area": 0,
"reject_controls": [],
"reject_max_area": 0,
"settings_controls": [],
"first_layer_summary": "Akzeptieren 0 / Ablehnen 0 / Einstellungen 0",
"cookie_context_found": true,
"reject_less_prominent": false,
"visible_control_count": 28,
"reject_prominence_ratio": 0
},
"gpc_signal": {
"error": "",
"enabled": true,
"storage": {
"total": 1,
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 1
},
"cookie_count": 1,
"request_count": 44,
"sec_gpc_header": true,
"navigator_value": true,
"contacted_domains": [
{
"host": "candyandmore.de",
"count": 41,
"category": "other",
"provider": "candyandmore.de",
"third_party": false,
"category_label": "Sonstige",
"resource_types": {
"xhr": 1,
"font": 6,
"image": 19,
"other": 1,
"script": 6,
"document": 1,
"stylesheet": 7
}
},
{
"host": "mtm.candyandmore.de",
"count": 2,
"category": "other",
"provider": "mtm.candyandmore.de",
"third_party": true,
"category_label": "Sonstige",
"resource_types": {
"ping": 1,
"script": 1
}
},
{
"host": "static.cloudflareinsights.com",
"count": 1,
"category": "analytics",
"provider": "Cloudflare Web Analytics",
"third_party": true,
"category_label": "Analytics",
"resource_types": {
"script": 1
}
}
],
"contacted_domain_count": 3,
"privacy_relevant_domains": [
{
"host": "static.cloudflareinsights.com",
"count": 1,
"category": "analytics",
"provider": "Cloudflare Web Analytics",
"third_party": true,
"category_label": "Analytics",
"resource_types": {
"script": 1
}
}
],
"third_party_cookie_count": 0,
"third_party_domain_count": 2,
"privacy_relevant_domain_count": 1
},
"screenshot": {
"fit": "contain",
"width": 160,
"height": 150,
"source_width": 1024,
"source_height": 960,
"source_capture": "full_page",
"capture_version": "contain-v4-viewport-transparency-160x150"
},
"consent_apis": {
"cmpapi": false,
"tcfapi": false,
"onetrust": false,
"cookiebot": false,
"data_layer": false,
"cmp_detected": false,
"usercentrics": false,
"google_tag_data": false
},
"accept_signal": {
"error": "",
"enabled": false,
"storage": {
"total": 0,
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"clicked_text": "",
"accept_clicked": false,
"accept_available": false,
"contacted_domains": [],
"contacted_domain_count": 0,
"new_domains_after_accept": [],
"privacy_relevant_domains": [],
"third_party_domain_count": 0,
"cookie_count_after_accept": 0,
"cookie_count_before_accept": 0,
"request_count_after_accept": 0,
"storage_count_after_accept": 0,
"request_count_before_accept": 0,
"new_cookie_count_after_accept": 0,
"privacy_relevant_domain_count": 0,
"new_request_count_after_accept": 0,
"third_party_cookie_count_after_accept": 0,
"storage_tracking_hint_count_after_accept": 0,
"new_privacy_relevant_domains_after_accept": [],
"new_privacy_relevant_domain_count_after_accept": 0
},
"request_count": 45,
"top_providers": [
{
"provider": "mtm.candyandmore.de",
"request_count": 3
},
{
"provider": "Cloudflare Web Analytics",
"request_count": 1
}
],
"request_samples": [
{
"host": "static.cloudflareinsights.com",
"method": "GET",
"referrer": {
"host": "candyandmore.de",
"has_path": false,
"has_query": false,
"same_site": true,
"path_depth": 0,
"query_keys": [],
"sensitive_query_key_count": 0
},
"has_query": false,
"path_depth": 2,
"query_keys": [],
"third_party": true,
"resource_type": "script",
"query_key_count": 0,
"url_value_param_count": 0,
"sensitive_query_key_count": 0,
"target_url_value_param_count": 0
},
{
"host": "mtm.candyandmore.de",
"method": "GET",
"referrer": {
"host": "candyandmore.de",
"has_path": false,
"has_query": false,
"same_site": true,
"path_depth": 0,
"query_keys": [],
"sensitive_query_key_count": 0
},
"has_query": false,
"path_depth": 1,
"query_keys": [],
"third_party": true,
"resource_type": "script",
"query_key_count": 0,
"url_value_param_count": 0,
"sensitive_query_key_count": 0,
"target_url_value_param_count": 0
},
{
"host": "mtm.candyandmore.de",
"method": "POST",
"referrer": {
"host": "candyandmore.de",
"has_path": false,
"has_query": false,
"same_site": true,
"path_depth": 0,
"query_keys": [],
"sensitive_query_key_count": 0
},
"has_query": true,
"path_depth": 1,
"query_keys": [
"action_name",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url",
"_id",
"_idn",
"send_image",
"_refts"
],
"third_party": true,
"resource_type": "ping",
"query_key_count": 19,
"url_value_param_count": 1,
"sensitive_query_key_count": 0,
"target_url_value_param_count": 1
},
{
"host": "mtm.candyandmore.de",
"method": "POST",
"referrer": {
"host": "candyandmore.de",
"has_path": false,
"has_query": false,
"same_site": true,
"path_depth": 0,
"query_keys": [],
"sensitive_query_key_count": 0
},
"has_query": true,
"path_depth": 1,
"query_keys": [
"e_c",
"e_a",
"e_n",
"ca",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url",
"_id"
],
"third_party": true,
"resource_type": "ping",
"query_key_count": 26,
"url_value_param_count": 2,
"sensitive_query_key_count": 0,
"target_url_value_param_count": 2
}
],
"cmp_consent_state": {
"tcf": {
"api_found": false,
"vendor_li": [],
"cmp_loaded": false,
"cmp_status": "",
"purpose_li": [],
"event_status": "",
"gdpr_applies": null,
"ping_success": false,
"policy_version": "",
"vendor_consents": [],
"vendor_li_count": 0,
"purpose_consents": [],
"purpose_li_count": 0,
"tc_string_length": 0,
"tc_string_present": false,
"vendor_consent_count": 0,
"purpose_consent_count": 0
},
"onetrust": {
"found": false,
"active_groups": [],
"active_group_count": 0
},
"cookiebot": {
"found": false,
"declined": false,
"consented": false,
"has_response": false,
"consent_marketing": null,
"consent_statistics": null,
"consent_preferences": null
},
"usercentrics": {
"found": false,
"has_response": false,
"services_count": 0,
"accepted_services_count": 0
}
},
"contacted_domains": [
{
"host": "candyandmore.de",
"count": 41,
"category": "other",
"provider": "candyandmore.de",
"third_party": false,
"category_label": "Sonstige",
"resource_types": {
"xhr": 1,
"font": 6,
"image": 19,
"other": 1,
"script": 6,
"document": 1,
"stylesheet": 7
}
},
{
"host": "mtm.candyandmore.de",
"count": 3,
"category": "other",
"provider": "mtm.candyandmore.de",
"third_party": true,
"category_label": "Sonstige",
"resource_types": {
"ping": 2,
"script": 1
}
},
{
"host": "static.cloudflareinsights.com",
"count": 1,
"category": "analytics",
"provider": "Cloudflare Web Analytics",
"third_party": true,
"category_label": "Analytics",
"resource_types": {
"script": 1
}
}
],
"privacy_api_metrics": {
"api_calls": {
"beacon_count": 2,
"keyboard_input_listener_count": 9
},
"beacon_count": 2,
"webgl_read_count": 0,
"canvas_read_count": 0,
"audio_context_count": 0,
"canvas_export_count": 0,
"fetch_keepalive_count": 0,
"webgl_parameter_count": 0,
"mutation_observer_count": 0,
"keyboard_input_listener_count": 9
},
"tcf_consent_analysis": {
"color": "green",
"score": 100,
"status": "unauffällig",
"summary": "TCF-Decoder: 0 Zweck(e) mit Consent/LI-Signal, 0 Vendor-Consent(s), 0 Vendor-LI-Signal(e).",
"findings": [],
"api_found": false,
"available": false,
"cmp_loaded": false,
"cmp_status": "",
"event_status": "",
"gdpr_applies": null,
"ping_success": false,
"purpose_rows": [
{
"id": 1,
"label": "Informationen auf einem Gerät speichern und/oder abrufen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 2,
"label": "Einfache Anzeigen auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 3,
"label": "Personalisiertes Anzeigen-Profil erstellen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 4,
"label": "Personalisierte Anzeigen auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 5,
"label": "Personalisiertes Inhalts-Profil erstellen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 6,
"label": "Personalisierte Inhalte auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 7,
"label": "Anzeigen-Leistung messen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 8,
"label": "Inhalte-Leistung messen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 9,
"label": "Marktforschung zur Generierung von Erkenntnissen nutzen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 10,
"label": "Produkte entwickeln und verbessern",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 11,
"label": "Begrenzte Daten zur Anzeigen-Auswahl verwenden",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
}
],
"vendor_li_ids": [],
"policy_version": "",
"vendor_li_count": 0,
"purpose_li_count": 0,
"tc_string_length": 0,
"tc_string_present": false,
"vendor_consent_ids": [],
"granted_purpose_rows": [],
"vendor_consent_count": 0,
"purpose_consent_count": 0,
"high_risk_purpose_count": 0,
"medium_risk_purpose_count": 0
},
"viewport_transparency": {
"samples": [
{
"tag": "a",
"top": 174,
"href": "https://www.candyandmore.de/Cookie-Hinweis/",
"left": 878,
"text": "hier",
"width": 24,
"height": 16,
"category": "cookie_consent"
}
],
"available": true,
"sample_count": 1,
"claim_boundary": "Sichtbarkeits-Evidence aus dem ersten Headless-Chromium-Viewport; keine Aussage ueber Footer nach Scrollen, Loginbereiche oder rechtliche Vollstaendigkeit.",
"viewport_width": 1024,
"category_counts": {
"cookie_consent": 1
},
"contact_visible": false,
"imprint_visible": false,
"viewport_height": 960,
"cookie_consent_visible": true,
"privacy_notice_visible": false
},
"consent_journey_matrix": {
"color": "green",
"items": [
{
"host": "static.cloudflareinsights.com",
"states": {
"gpc": 1,
"default": 1
},
"category": "analytics",
"provider": "Cloudflare Web Analytics",
"category_label": "Analytics",
"privacy_relevant": true,
"total_request_count": 2
},
{
"host": "mtm.candyandmore.de",
"states": {
"gpc": 2,
"default": 3
},
"category": "other",
"provider": "mtm.candyandmore.de",
"category_label": "Sonstige",
"privacy_relevant": false,
"total_request_count": 5
}
],
"score": 92,
"states": [
{
"id": "default",
"label": "Erstaufruf",
"description": "Kontakte ohne Nutzeraktion",
"domain_count": 2,
"request_count": 4,
"privacy_relevant_domain_count": 1
},
{
"id": "reject_new",
"label": "Nach Ablehnen neu",
"description": "Neue Kontakte nach Ablehnen-Klick",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "accept_new",
"label": "Nach Akzeptieren neu",
"description": "Neue Kontakte nach Akzeptieren-Klick",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "gpc",
"label": "GPC-Aufruf",
"description": "Kontakte bei Global Privacy Control",
"domain_count": 2,
"request_count": 3,
"privacy_relevant_domain_count": 1
}
],
"status": "unauffällig",
"summary": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 1 im GPC-Aufruf.",
"gpc_privacy_relevant_domain_count": 1,
"accept_privacy_relevant_domain_count": 0,
"reject_privacy_relevant_domain_count": 0
},
"consent_state_evidence": {
"rows": [
{
"id": "default",
"label": "Erstaufruf",
"status": "ohne Nutzeraktion",
"evidence": "Baseline aus erstem Chromium-Aufruf ohne Banner-Interaktion.",
"risk_level": "mittel",
"cookie_count": 1,
"domain_count": 3,
"request_count": 45,
"storage_total": 1,
"new_cookie_count": 1,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 1
},
{
"id": "reject",
"label": "Nach Ablehnen",
"status": "nicht verfügbar",
"evidence": "",
"risk_level": "niedrig",
"cookie_count": 1,
"domain_count": 0,
"request_count": 0,
"storage_total": 1,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "accept",
"label": "Nach Akzeptieren",
"status": "nicht ausgeführt",
"evidence": "",
"risk_level": "niedrig",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "gpc",
"label": "GPC-Aufruf",
"status": "aktiv",
"evidence": "Navigator-GPC und Sec-GPC wurden im gesonderten Browserlauf gesetzt.",
"risk_level": "mittel",
"cookie_count": 1,
"domain_count": 3,
"request_count": 44,
"storage_total": 1,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 1
}
],
"color": "yellow",
"score": 80,
"status": "prüfen",
"summary": "Consent-State-Evidence: 4 Zustände verglichen, 0 hoch auffällig, 2 mittel auffällig.",
"findings": [
{
"id": "consent_state_gpc_evidence_review",
"title": "Consent-Zustand: GPC mit Tracking-Hinweisen",
"public": true,
"category": "privacy",
"severity": "info"
}
],
"available": true,
"high_count": 0,
"medium_count": 2
},
"contacted_domain_count": 3,
"fingerprinting_analysis": {
"color": "green",
"score": 90,
"checks": [
{
"id": "canvas",
"ok": true,
"count": 0,
"label": "Canvas-Auslese",
"detail": "0 Pixel-Lesezugriff(e), 0 Export(e)."
},
{
"id": "webgl",
"ok": true,
"count": 0,
"label": "WebGL-Merkmale",
"detail": "0 Parameterzugriff(e), 0 Pixel-Lesezugriff(e)."
},
{
"id": "audio",
"ok": true,
"count": 0,
"label": "AudioContext",
"detail": "0 AudioContext/OfflineAudioContext-Aufruf(e)."
},
{
"id": "session_replay",
"ok": true,
"count": 0,
"label": "Session-Replay-Anbieter",
"detail": "Keine bekannten Anbieter erkannt."
},
{
"id": "input_listeners",
"ok": false,
"count": 9,
"label": "Tastatur-/Eingabe-Listener",
"detail": "9 Tastatur-/Input-Listener, 124 Interaktions-Listener, 0 MutationObserver."
}
],
"status": "unauffällig",
"metrics": {
"webgl_read_count": 0,
"canvas_read_count": 0,
"audio_context_count": 0,
"canvas_export_count": 0,
"webgl_parameter_count": 0,
"mutation_observer_count": 0,
"keyboard_input_listener_count": 9
},
"summary": "1 Fingerprinting-/Session-Replay-Hinweis(e) aus dem Browserlauf.",
"findings": [
{
"id": "browser_keystroke_listener_signals",
"count": 9,
"title": "Viele Tastatur-/Eingabe-Listener im Browser erkannt",
"public": true,
"category": "privacy",
"severity": "info"
}
],
"finding_count": 1,
"session_replay_domains": []
},
"privacy_relevant_domains": [
{
"host": "static.cloudflareinsights.com",
"count": 1,
"category": "analytics",
"provider": "Cloudflare Web Analytics",
"third_party": true,
"category_label": "Analytics",
"resource_types": {
"script": 1
}
}
],
"provider_category_counts": {
"other": 1,
"analytics": 1
},
"provider_category_labels": {
"other": "other",
"analytics": "Analytics"
},
"third_party_domain_count": 2,
"embedded_content_analysis": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen.",
"findings": [],
"map_count": 0,
"total_count": 0,
"video_count": 0,
"captcha_count": 0,
"category_counts": [],
"social_widget_count": 0,
"loaded_pre_consent_count": 0,
"request_count_by_provider": []
},
"referrer_leakage_analysis": {
"color": "yellow",
"items": [
{
"host": "mtm.candyandmore.de",
"category": "other",
"provider": "mtm.candyandmore.de",
"query_keys": [
"action_name",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url"
],
"risk_reason": "Seiten-URL oder URL-Wert in Drittanbieter-Requestparametern",
"resource_type": "ping",
"category_label": "Sonstige",
"referrer_query_keys": [],
"url_value_param_count": 1,
"target_url_value_param_count": 1
},
{
"host": "mtm.candyandmore.de",
"category": "other",
"provider": "mtm.candyandmore.de",
"query_keys": [
"e_c",
"e_a",
"e_n",
"ca",
"idsite",
"rec",
"r",
"h"
],
"risk_reason": "Seiten-URL oder URL-Wert in Drittanbieter-Requestparametern",
"resource_type": "ping",
"category_label": "Sonstige",
"referrer_query_keys": [],
"url_value_param_count": 2,
"target_url_value_param_count": 2
}
],
"score": 76,
"status": "prüfen",
"summary": "1 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 0 sensible Query-Kontexte.",
"findings": [
{
"id": "third_party_page_url_parameter",
"count": 2,
"title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"sample_count": 4,
"full_referrer_count": 0,
"page_url_param_count": 2,
"affected_domain_count": 1,
"sensitive_query_count": 0
},
"third_party_contact_matrix": {
"color": "yellow",
"items": [
{
"host": "static.cloudflareinsights.com",
"region": "US",
"status": "dokumentieren",
"category": "analytics",
"provider": "Cloudflare Web Analytics",
"risk_level": "mittel",
"request_count": 1,
"transfer_risk": "mittel",
"category_label": "Analytics",
"resource_types": [
{
"type": "script",
"count": 1
}
],
"transfer_label": "Drittland/USA",
"privacy_relevant": true
},
{
"host": "mtm.candyandmore.de",
"region": "EU/EWR",
"status": "prüfen",
"category": "other",
"provider": "mtm.candyandmore.de",
"risk_level": "niedrig",
"request_count": 3,
"transfer_risk": "niedrig",
"category_label": "Sonstige",
"resource_types": [
{
"type": "ping",
"count": 2
},
{
"type": "script",
"count": 1
}
],
"transfer_label": "EU/EWR",
"privacy_relevant": false
}
],
"score": 85,
"status": "prüfen",
"summary": "2 Drittanbieter-Domain(s) beim ersten Browseraufruf, davon 1 datenschutzrelevant.",
"category_counts": {
"Sonstige": 1,
"Analytics": 1
},
"total_domain_count": 2,
"total_request_count": 4,
"privacy_relevant_count": 1,
"transfer_risk_analysis": {
"color": "green",
"items": [
{
"host": "static.cloudflareinsights.com",
"region": "US",
"provider": "Cloudflare Web Analytics",
"request_count": 1,
"transfer_risk": "mittel",
"category_label": "Analytics",
"transfer_label": "Drittland/USA",
"privacy_relevant": true
},
{
"host": "mtm.candyandmore.de",
"region": "EU/EWR",
"provider": "mtm.candyandmore.de",
"request_count": 3,
"transfer_risk": "niedrig",
"category_label": "Sonstige",
"transfer_label": "EU/EWR",
"privacy_relevant": false
}
],
"score": 94,
"status": "unauffällig",
"summary": "2 Drittanbieter für Transfer-/Jurisdiktionsprüfung, 0 mit hohem Prüfbedarf, 0 unklar.",
"findings": [],
"unknown_count": 0,
"high_risk_count": 0,
"total_vendor_count": 2,
"third_country_count": 1
}
},
"privacy_relevant_domain_count": 1,
"tracking_pixel_beacon_analysis": {
"color": "orange",
"items": [
{
"url": "",
"host": "candyandmore.de",
"kind": "beacon_api",
"reason": "sendBeacon API 2 Aufruf(e), 0 Code-Hinweis(e); keepalive 0 Aufruf(e), 0 Code-Hinweis(e).",
"source": "javascript_api",
"category": "telemetry",
"provider": "Beacon-/Keepalive-API",
"third_party": false,
"resource_type": "beacon",
"category_label": "Telemetry"
}
],
"score": 72,
"status": "auffällig",
"summary": "0 Pixel-/Bildtracking-Hinweis(e), 3 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s).",
"findings": [
{
"id": "beacon_api_usage",
"count": 3,
"title": "Beacon-/Keepalive-Telemetrie erkannt",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"pixel_count": 0,
"link_ping_count": 0,
"telemetry_count": 1,
"beacon_api_count": 2,
"third_party_count": 0,
"fetch_keepalive_count": 0,
"privacy_relevant_count": 0,
"beacon_code_reference_count": 0,
"fetch_keepalive_reference_count": 0
}
},
"privacy_analysis": {
"cookies": {
"items": [
{
"name": "language",
"secure": true,
"samesite": false,
"tracking": false,
"pre_consent": true,
"likely_essential": false
}
],
"total": 1,
"tracking": [],
"pre_consent": [
"language"
],
"missing_secure": [],
"missing_samesite": [
"language"
],
"pre_consent_tracking": [],
"pre_consent_nonessential": [
"language"
]
},
"findings": [
{
"id": "pre_consent_nonessential_cookies",
"title": "Möglicherweise nicht notwendige Cookies vor Einwilligung",
"public": true,
"cookies": [
"language"
],
"category": "privacy",
"severity": "warning"
},
{
"id": "cookie_missing_samesite",
"title": "Cookie ohne SameSite-Attribut",
"public": true,
"cookies": [
"language"
],
"category": "privacy",
"severity": "info"
}
],
"tracking_ids": [],
"tracking_scripts": [],
"consent_hint_found": false,
"privacy_policy_hint_found": false
},
"consent_audit": {
"color": "green",
"score": 90,
"checks": [
{
"id": "banner_visible",
"ok": true,
"label": "Cookie-/Consent-Hinweis sichtbar",
"detail": "Ein Hinweis mit Cookie-/Einwilligungsbezug wurde im sichtbaren Text erkannt."
},
{
"id": "reject_visible",
"ok": true,
"label": "Ablehnen gleichwertig erreichbar",
"detail": "Ablehnen oder nur notwendige Cookies wurde im Text oder Browser erkannt. Browser-Buttons: 0."
},
{
"id": "settings_visible",
"ok": true,
"label": "Einstellungen oder Auswahl vorhanden",
"detail": "Eine Einstellungs- oder Auswahlmoeglichkeit wurde im Text oder Browser erkannt. Browser-Buttons: 0."
},
{
"id": "browser_reject_visible",
"ok": true,
"label": "Ablehnen im sichtbaren Banner",
"detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
},
{
"id": "browser_settings_visible",
"ok": true,
"label": "Einstellungen im sichtbaren Banner",
"detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
},
{
"id": "reject_equally_prominent",
"ok": true,
"label": "Ablehnen nicht deutlich schwaecher dargestellt",
"detail": "Groessen-Verhältnis Ablehnen/Akzeptieren: nicht messbar."
},
{
"id": "reject_button_clickable",
"ok": true,
"label": "Ablehnen technisch klickbar",
"detail": "Wenn ein Ablehnen-Button sichtbar ist, klickt SaferPage ihn im Chromium-Browser einmal an."
},
{
"id": "no_new_cookies_after_reject",
"ok": true,
"label": "Keine neuen Cookies nach Ablehnen",
"detail": "0 neue Cookie(s) nach dem Ablehnen-Klick."
},
{
"id": "no_tracking_storage_after_reject",
"ok": true,
"label": "Kein Tracking-Storage nach Ablehnen",
"detail": "0 Tracking-Hinweis(e) im Web Storage nach Ablehnen."
},
{
"id": "no_privacy_domains_after_reject",
"ok": true,
"label": "Keine neuen Tracking-Kontakte nach Ablehnen",
"detail": "0 neue datenschutzrelevante Domain(s) nach Ablehnen."
},
{
"id": "gpc_signal_respected",
"ok": false,
"label": "GPC-Signal ohne Tracking-Hinweise",
"detail": "GPC-Aufruf: 1 datenschutzrelevante Domain(s), 0 Drittanbieter-Cookie(s), 0 Storage-Hinweis(e)."
},
{
"id": "no_tracking_cookies_before_consent",
"ok": true,
"label": "Keine Tracking-Cookies vor Einwilligung",
"detail": "0 Tracking-Cookie(s) im Erstaufruf."
},
{
"id": "no_nonessential_cookies_before_consent",
"ok": false,
"label": "Keine nicht notwendigen Cookies vor Einwilligung",
"detail": "1 moeglicherweise nicht notwendige Cookie(s) im Erstaufruf."
},
{
"id": "third_parties_explained",
"ok": true,
"label": "Drittanbieter begrenzt und erklaerbar",
"detail": "0 datenschutzrelevante Drittanbieter-Domain(s), 2 Drittanbieter insgesamt."
},
{
"id": "storage_without_tracking_hints",
"ok": true,
"label": "Web Storage ohne Tracking-Hinweise",
"detail": "1 Storage-Key(s), 0 Tracking-Hinweis(e)."
},
{
"id": "cmp_api_detected_when_needed",
"ok": true,
"label": "CMP-/TCF-Signal bei Tracking erkennbar",
"detail": "Gängige CMP-/TCF-Indikatoren: __tcfapi, __cmp, Cookiebot, OneTrust oder Usercentrics."
},
{
"id": "accept_click_documented",
"ok": true,
"label": "Akzeptieren-Klick nachvollziehbar",
"detail": "Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0."
},
{
"id": "cmp_state_readable",
"ok": true,
"label": "CMP-/TCF-Zustand auslesbar",
"detail": "TCF TC-String: nein, Cookiebot: nein, OneTrust: nein, Usercentrics: nein."
},
{
"id": "cmp_default_restrictive",
"ok": true,
"label": "CMP-Default wirkt restriktiv",
"detail": "TCF Purposes erlaubt: 0, TCF Vendors erlaubt: 0, Cookiebot Statistik/Marketing: nein."
}
],
"status": "unauffällig",
"summary": "Consent und Erstaufruf wirken im passiven Check weitgehend sauber.",
"evidence": [
"1 Cookie(s) beim ersten Aufruf aus HTTP-Headern und Chromium",
"0 Tracking-Script(s) im HTML",
"0 datenschutzrelevante Drittanbieter-Domain(s)",
"1 Storage-Key(s), 0 Tracking-Hinweis(e)",
"Consent-Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0",
"Ablehnen/Akzeptieren-Prominenz: nicht messbar",
"Reject-Test: nicht ausgefuehrt, neue Cookies 0, Tracking-Storage 0, neue Datenschutz-Domains 0",
"Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0, Drittanbieter-Cookies 0",
"CMP-State: TCF-String nein, TCF Purposes 0, TCF Vendors 0, Cookiebot nein, OneTrust-Gruppen 0, Usercentrics-Services 0",
"GPC-Test: aktiv, Datenschutz-Domains 1, Drittanbieter-Cookies 0, Storage-Hinweise 0",
"CMP-/TCF-Signal: nein",
"Google Consent Default: nein"
],
"gpc_enabled": true,
"cmp_detected": false,
"blocking_plan": {
"items": [
{
"kind": "third_party_request",
"level": "hoch",
"source": "Cloudflare Web Analytics",
"target": "static.cloudflareinsights.com",
"recipes": [
{
"tool": "Google Tag Manager"
},
{
"tool": "Cookiebot"
},
{
"tool": "Usercentrics"
},
{
"tool": "OneTrust"
},
{
"tool": "Developer-Fallback"
}
],
"category": "analytics",
"evidence": "1 Request(s) im Erstaufruf · Analytics",
"category_label": "Analytics"
},
{
"kind": "cookie",
"level": "mittel",
"source": "candyandmore.de",
"target": "language",
"recipes": [
{
"tool": "Google Tag Manager"
},
{
"tool": "Cookiebot"
},
{
"tool": "Usercentrics"
},
{
"tool": "OneTrust"
},
{
"tool": "Developer-Fallback"
}
],
"category": "functional",
"evidence": "vor Consent gesetzt · candyandmore.de · Session",
"category_label": "Funktional"
},
{
"kind": "storage",
"level": "mittel",
"source": "sessionStorage",
"target": "eyeAbleShow",
"recipes": [
{
"tool": "Google Tag Manager"
},
{
"tool": "Usercentrics"
},
{
"tool": "Developer-Fallback"
}
],
"category": "unknown",
"evidence": "sessionStorage · Unklar · Sitzung/Tab",
"category_label": "Unklar"
}
],
"summary": "3 Blockier-/Consent-Maßnahme(n) abgeleitet: 1 hoch, 2 mittel.",
"available": true,
"high_count": 1,
"total_count": 3,
"type_counts": {
"cookie": 1,
"storage": 1,
"third_party_request": 1
},
"medium_count": 2
},
"tcf_api_found": false,
"cookiebot_found": false,
"accept_test_enabled": false,
"browser_cookie_count": 1,
"accept_button_clicked": false,
"browser_storage_count": 1,
"reject_button_clicked": false,
"reject_less_prominent": false,
"tcf_tc_string_present": false,
"tracking_script_count": 0,
"accept_button_available": false,
"reject_button_available": false,
"reject_prominence_ratio": 0,
"pre_consent_cookie_count": 1,
"pre_consent_cookie_names": [
"language"
],
"tcf_vendor_consent_count": 0,
"third_party_domain_count": 2,
"tcf_purpose_consent_count": 0,
"onetrust_active_group_count": 0,
"usercentrics_services_count": 0,
"browser_accept_control_count": 0,
"browser_cookie_context_found": true,
"browser_reject_control_count": 0,
"gpc_third_party_cookie_count": 0,
"post_accept_new_cookie_count": 0,
"post_reject_new_cookie_count": 0,
"post_accept_new_request_count": 0,
"browser_settings_control_count": 0,
"gpc_storage_tracking_hint_count": 0,
"cookiebot_marketing_or_statistics": false,
"gpc_privacy_relevant_domain_count": 1,
"pre_consent_tracking_cookie_count": 0,
"pre_consent_tracking_cookie_names": [],
"privacy_relevant_third_party_count": 0,
"browser_storage_tracking_hint_count": 0,
"post_accept_third_party_cookie_count": 0,
"pre_consent_nonessential_cookie_count": 1,
"pre_consent_nonessential_cookie_names": [
"language"
],
"post_accept_storage_tracking_hint_count": 0,
"post_reject_storage_tracking_hint_count": 0,
"post_accept_privacy_relevant_domain_count": 0,
"post_reject_privacy_relevant_domain_count": 0
},
"cookie_inventory": {
"color": "green",
"items": [
{
"name": "language",
"domain": "candyandmore.de",
"secure": true,
"sources": [
"http_set_cookie",
"browser_first_load"
],
"category": "functional",
"provider": "candyandmore.de",
"tracking": false,
"http_only": true,
"same_site": "Lax",
"expires_at": "",
"long_lived": false,
"persistent": false,
"first_party": true,
"origin_host": "candyandmore.de",
"pre_consent": true,
"source_label": "HTTP Set-Cookie, Chromium-Erstaufruf",
"category_label": "Funktional",
"retention_risk": "niedrig",
"expires_in_days": null,
"origin_evidence": "41 Browser-Request(s) · document:1, font:6, image:19, other:1",
"origin_provider": "candyandmore.de",
"retention_class": "session",
"retention_label": "Session",
"likely_essential": false,
"origin_script_url": "",
"origin_resource_type": ""
}
],
"score": 100,
"total": 1,
"status": "unauffällig",
"summary": "1 Cookie(s) inventarisiert: 0 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 0 langlebige Cookie(s), 0 sehr lange Laufzeit(en).",
"findings": [],
"categories": {
"functional": 1
},
"tracking_count": 0,
"category_labels": {
"consent": "Consent",
"payment": "Zahlung",
"unknown": "Unklar",
"security": "Sicherheit",
"analytics": "Analytics",
"necessary": "Notwendig",
"functional": "Funktional",
"advertising": "Werbung"
},
"long_lived_count": 0,
"persistent_count": 0,
"first_party_count": 1,
"pre_consent_count": 1,
"retention_classes": {
"session": 1
},
"third_party_count": 0,
"missing_secure_count": 0,
"retention_risk_count": 0,
"retention_risk_items": [],
"very_long_lived_count": 0,
"missing_samesite_count": 0,
"persistent_unknown_count": 0,
"long_lived_tracking_count": 0
},
"security_header_analysis": {
"color": "red",
"score": 46,
"checks": [
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "HSTS",
"value": "",
"header": "strict-transport-security",
"present": false,
"purpose": "Erzwingt HTTPS nach dem ersten sicheren Aufruf.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Content-Security-Policy",
"value": "",
"header": "content-security-policy",
"present": false,
"purpose": "Begrenzt Skript-, Frame- und Ressourcenquellen im Browser.",
"severity": "warning"
},
{
"ok": true,
"note": "",
"label": "X-Frame-Options",
"value": "sameorigin",
"header": "x-frame-options",
"present": true,
"purpose": "Reduziert Clickjacking-Risiken bei älteren Browsern.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "X-Content-Type-Options",
"value": "",
"header": "x-content-type-options",
"present": false,
"purpose": "Verhindert MIME-Sniffing bei Skripten und Stylesheets.",
"severity": "warning"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Referrer-Policy",
"value": "",
"header": "referrer-policy",
"present": false,
"purpose": "Begrenzt, welche URL-Informationen an Zielseiten weitergegeben werden.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Permissions-Policy",
"value": "",
"header": "permissions-policy",
"present": false,
"purpose": "Begrenzt sensible Browser-Funktionen pro Seite.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Opener-Policy",
"value": "",
"header": "cross-origin-opener-policy",
"present": false,
"purpose": "Isoliert Top-Level-Fenster und reduziert Cross-Origin-Seiteneffekte.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Resource-Policy",
"value": "",
"header": "cross-origin-resource-policy",
"present": false,
"purpose": "Begrenzt, welche fremden Seiten Ressourcen einbetten dürfen.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Embedder-Policy",
"value": "",
"header": "cross-origin-embedder-policy",
"present": false,
"purpose": "Erzwingt kontrollierte Cross-Origin-Einbettungen und kann Cross-Origin Isolation ermöglichen.",
"severity": "info"
}
],
"status": "kritisch",
"missing": [
"HSTS",
"Content-Security-Policy",
"X-Content-Type-Options",
"Referrer-Policy",
"Permissions-Policy",
"Cross-Origin-Opener-Policy",
"Cross-Origin-Resource-Policy",
"Cross-Origin-Embedder-Policy"
],
"summary": "1 von 9 wichtigen Security-Headern vorhanden, 1 korrekt bewertet. Keine Content-Security-Policy gefunden.",
"findings": [],
"ok_count": 1,
"weak_count": 0,
"csp_analysis": {
"color": "red",
"score": 0,
"status": "fehlt",
"summary": "Keine Content-Security-Policy gefunden.",
"enforced": false,
"findings": [],
"available": false,
"directives": [],
"report_only": false,
"finding_count": 0,
"warning_count": 0
},
"missing_count": 8,
"present_count": 1,
"missing_info_count": 5,
"missing_warning_count": 3
},
"infrastructure_analysis": {
"signals": {
"caa": false,
"dnssec": false,
"final_https": true,
"tls_version": "TLSv1.3",
"hsts_enabled": false,
"address_count": 6,
"ipv6_available": true,
"email_protection": {
"mx": true,
"spf": true,
"dmarc": true
},
"certificate_valid": true,
"certificate_issuer": "WE1",
"certificate_alt_names": [
"candyandmore.de",
"*.candyandmore.de"
],
"multiple_ip_addresses": true,
"certificate_expires_at": "Jul 25 05:12:16 2026 GMT",
"certificate_days_remaining": 40,
"certificate_hostname_matches": true
},
"findings": [
{
"id": "caa_missing",
"title": "CAA-Record fehlt",
"public": true,
"category": "dns",
"severity": "info"
}
],
"risk_level": "low",
"positive_signals": [
"Mehrere IP-Adressen gefunden: Hinweis auf redundante Infrastruktur oder CDN.",
"IPv6 ist vorhanden.",
"Moderne TLS-Version aktiv: TLSv1.3.",
"DMARC ist für die Domain vorhanden."
]
},
"performance_analysis": {
"score": 100,
"signals": {
"compressed": false,
"duration_ms": 418,
"image_count": 19,
"script_count": 0,
"cache_control": "max-age=0",
"content_length": 0,
"viewport_found": true,
"stylesheet_count": 7
},
"findings": [],
"risk_level": "low"
},
"accessibility_analysis": {
"color": "orange",
"score": 60,
"status": "auffällig",
"signals": {
"h1_count": 0,
"image_count": 19,
"button_count": 14,
"heading_count": 2,
"viewport_found": true,
"html_lang_found": true,
"form_field_count": 3,
"image_missing_alt_count": 8,
"buttons_without_name_count": 1,
"form_fields_without_label_count": 0
},
"summary": "19 Bild(er), 3 Formularfeld(er), 14 Button(s) im passiven HTML-Sample auf Basis-Barrierefreiheit geprüft.",
"findings": [
{
"id": "image_alt_missing",
"count": 8,
"title": "Bilder ohne Alternativtext",
"public": true,
"category": "accessibility",
"severity": "info"
},
{
"id": "button_name_missing",
"count": 1,
"title": "Buttons ohne erkennbaren Namen",
"public": true,
"category": "accessibility",
"severity": "warning"
}
],
"wcag_matrix": {
"rows": [
{
"id": "wcag_non_text_content",
"ok": false,
"wcag": "WCAG 1.1.1 Non-text Content",
"title": "Alternativtexte für Bilder",
"impact": "mittel",
"status": "prüfen",
"evidence": "8 von 19 Bild(er) ohne alt-Text im HTML-Sample."
},
{
"id": "wcag_form_labels",
"ok": true,
"wcag": "WCAG 1.3.1 Info and Relationships / 3.3.2 Labels or Instructions",
"title": "Formularfelder beschriften",
"impact": "niedrig",
"status": "ok",
"evidence": "0 von 3 Formularfeld(er) ohne erkennbare Beschriftung."
},
{
"id": "wcag_button_names",
"ok": false,
"wcag": "WCAG 4.1.2 Name, Role, Value",
"title": "Buttons mit Namen versehen",
"impact": "hoch",
"status": "prüfen",
"evidence": "1 von 14 Button(s) ohne erkennbaren Namen."
},
{
"id": "wcag_page_language",
"ok": true,
"wcag": "WCAG 3.1.1 Language of Page",
"title": "Seitensprache auszeichnen",
"impact": "niedrig",
"status": "ok",
"evidence": "HTML-lang-Attribut gefunden."
},
{
"id": "wcag_heading_structure",
"ok": false,
"wcag": "WCAG 1.3.1 Info and Relationships / 2.4.6 Headings and Labels",
"title": "Überschriftenstruktur",
"impact": "mittel",
"status": "prüfen",
"evidence": "0 H1 und 2 Überschrift(en) im HTML-Sample."
},
{
"id": "wcag_mobile_reflow",
"ok": true,
"wcag": "WCAG 1.4.10 Reflow",
"title": "Mobile Viewport-Basis",
"impact": "niedrig",
"status": "ok",
"evidence": "Viewport-Meta-Tag gefunden."
}
],
"summary": "3 WCAG-/EAA-Prüfpunkt(e) auffällig, davon 1 mit hoher Auswirkung.",
"standard": "WCAG 2.2 orientierte Basisprüfung",
"available": true,
"issue_count": 3,
"high_impact_count": 1
}
},
"domain_history": {
"status": [
"active"
],
"summary": "RDAP liefert kein klares Registrierungsdatum.",
"age_days": null,
"findings": [],
"available": true,
"registrar": "",
"expires_at": "",
"risk_level": "unknown",
"registered_at": "",
"expires_in_days": null,
"last_changed_at": "2019-11-20T08:35:07+00:00"
},
"data_entry_analysis": {
"forms": [
{
"method": "POST",
"purpose": "E-Mail",
"data_types": [
{
"id": "address",
"label": "Adresse"
},
{
"id": "email",
"label": "E-Mail"
},
{
"id": "login",
"label": "Login/Passwort"
}
],
"field_count": 2
},
{
"url": "https://www.candyandmore.de/Cookie-Hinweis",
"path": "/Cookie-Hinweis",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://www.candyandmore.de/Damhert-Framboise-Cookies-sugarfree.html",
"path": "/Damhert-Framboise-Cookies-sugarfree.html",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://www.candyandmore.de/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"path": "/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://www.candyandmore.de/index.php",
"path": "/index.php",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Login-Formular",
"data_types": [
{
"id": "login",
"label": "Login/Passwort"
}
],
"field_count": 0
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/Cookie-Hinweis",
"url": "https://www.candyandmore.de/Cookie-Hinweis"
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/Damhert-Framboise-Cookies-sugarfree.html",
"url": "https://www.candyandmore.de/Damhert-Framboise-Cookies-sugarfree.html"
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"url": "https://www.candyandmore.de/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html"
},
{
"purpose": "Login-Formular",
"field_count": 0,
"source": "crawl",
"path": "/index.php",
"url": "https://www.candyandmore.de/index.php"
}
],
"score": 25,
"summary": "Crawl fand 28 Formular(e) auf 4 geprüften Seite(n), u. a. /Cookie-Hinweis, /Damhert-Framboise-Cookies-sugarfree.html, /Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html, /index.php.",
"findings": [
{
"id": "data_entry_privacy_context_missing",
"title": "Dateneingabe ohne klaren Datenschutzkontext",
"public": true,
"category": "data_entry",
"severity": "warning"
},
{
"id": "login_without_clear_privacy_context",
"title": "Login-Felder ohne klaren Datenschutzkontext",
"public": true,
"category": "data_entry",
"severity": "warning"
},
{
"id": "payment_without_clear_operator",
"title": "Zahlungs-/Shop-Signal ohne klare Betreibertransparenz",
"public": true,
"category": "data_entry",
"severity": "warning"
}
],
"form_count": 28,
"risk_level": "medium",
"field_count": 3,
"asks_for_data": true,
"crawl_form_pages": [
{
"url": "https://www.candyandmore.de/Cookie-Hinweis",
"path": "/Cookie-Hinweis",
"category": "cookies",
"form_count": 2
},
{
"url": "https://www.candyandmore.de/Damhert-Framboise-Cookies-sugarfree.html",
"path": "/Damhert-Framboise-Cookies-sugarfree.html",
"category": "cookies",
"form_count": 8
},
{
"url": "https://www.candyandmore.de/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"path": "/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"category": "cookies",
"form_count": 8
},
{
"url": "https://www.candyandmore.de/index.php",
"path": "/index.php",
"category": "login",
"form_count": 10
}
],
"payment_providers": [],
"detected_data_types": [
{
"id": "email",
"count": 1,
"label": "E-Mail"
},
{
"id": "login",
"count": 1,
"label": "Login/Passwort"
},
{
"id": "address",
"count": 1,
"label": "Adresse"
},
{
"id": "payment",
"count": 1,
"label": "Zahlung"
}
],
"crawl_form_page_count": 4,
"privacy_context_found": false,
"operator_context_found": false
},
"pii_exposure_analysis": {
"color": "yellow",
"score": 82,
"checks": [
{
"id": "current_url",
"ok": true,
"count": 0,
"label": "Aktuelle URL",
"detail": "Keine sensiblen Query-Parameter erkannt."
},
{
"id": "link_queries",
"ok": true,
"count": 0,
"label": "Link-Parameter",
"detail": "Keine sensiblen Link-Querys erkannt."
},
{
"id": "get_forms",
"ok": true,
"count": 0,
"label": "GET-Formulare",
"detail": "Keine personenbezogenen GET-Formulare erkannt."
},
{
"id": "external_forms",
"ok": true,
"count": 0,
"label": "Externe Formularziele",
"detail": "Keine externen Formularziele mit personenbezogenen Feldern erkannt."
},
{
"id": "tracking_context",
"ok": false,
"count": 1,
"label": "Tracking neben Dateneingabe",
"detail": "1 datenschutzrelevante Drittanbieter."
}
],
"status": "prüfen",
"summary": "1 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext.",
"findings": [
{
"id": "pii_tracking_on_data_entry_page",
"title": "Dateneingabe und datenschutzrelevante Drittanbieter im selben Browseraufruf",
"public": true,
"category": "privacy",
"severity": "warning",
"third_party_count": 1
}
],
"link_hits": [],
"finding_count": 1,
"current_url_hits": [],
"tracking_context": true,
"sensitive_get_forms": []
},
"scan_history_analysis": {
"available": false,
"summary": "Noch kein früherer gespeicherter Scan für diese Domain vorhanden.",
"total_scan_count": 1,
"previous_scan_count": 0,
"history": [
{
"scan_id": "f7d242be-d6ba-4fbc-9786-e218fb05c7e0",
"created_at": "2026-06-15 05:29:37.614946+02",
"score": 0,
"verdict": "riskant",
"finding_count": 31,
"integrity_root_hash": "a66a8cfcc011bbbb3f2771c44cbecb2c1abd274901297db23a5e8d03ca50c3e5",
"integrity_available_hash_count": 9,
"current": true
}
],
"new_findings": [],
"resolved_findings": [],
"technical_changes": {
"available": false,
"summary": "Noch kein früherer Scan für technische Änderungen vorhanden."
}
},
"benchmark_analysis": {
"host": "candyandmore.de",
"rank": 1,
"score": 0,
"status": "im_mittelfeld",
"summary": "candyandmore.de liegt mit 0 Punkten ungefähr im gespeicherten Vergleichsfeld. Weil viele gespeicherte Checks bei 0 Punkten liegen, zeigt die Detailansicht zusätzlich aktive Peers mit Durchschnitt 17.3.",
"available": true,
"peer_count": 1692,
"percentile": 0,
"query_mode": "php_ttl_cache_refresh",
"distribution": {
"0_39": 1686,
"40_59": 4,
"60_79": 2,
"80_100": 0
},
"median_score": 0,
"average_score": 1,
"comparison_basis": "Neuester gespeicherter SaferPage-Scan je Domain; überwiegend deutschsprachige gespeicherte Checks.",
"same_score_count": 0,
"better_than_count": 0,
"qualified_peer_count": 96,
"zero_score_count": 1596,
"top_quartile_score": 0,
"top_decile_score": 0,
"qualified_average_score": 17.3,
"qualified_median_score": 16,
"qualified_top_quartile_score": 24,
"qualified_top_decile_score": 36,
"thresholds": [
{
"id": "critical",
"label": "Kritisch",
"range": "0-39",
"met": true
},
{
"id": "basic",
"label": "Basis stabilisieren",
"range": "40-59",
"met": false
},
{
"id": "managed",
"label": "Gesteuert",
"range": "60-79",
"met": false
},
{
"id": "strong",
"label": "Stark",
"range": "80-100",
"met": false
}
],
"risk_tier": "kritisch",
"target_score": 40,
"aspirational_target_score": 60,
"gap_to_target": 40,
"gap_to_top_quartile": 24,
"gap_to_strong": 80,
"cache_ttl_seconds": 300
},
"audit_receipt": {
"url": "https://candyandmore.de/",
"host": "candyandmore.de",
"status": "verfügbar",
"bot_url": "https://saferpage.de/bot",
"summary": "Prüfbeleg für candyandmore.de: kontrollierter HTTP-/Browser-Kurzcheck mit 45 Request(s), 4 Consent-Zustand/Zuständen und 7 Artefakt(en).",
"renderer": "playwright-chromium",
"artifacts": [
{
"label": "Öffentlicher Kurzreport",
"detail": "https://saferpage.de/candyandmore.de",
"status": "verfügbar"
},
{
"label": "JSON-Export",
"detail": "Maschinenlesbarer Report mit Modulen, Nachweisen und Tabellen.",
"status": "verfügbar"
},
{
"label": "CSV-Export",
"detail": "Tabellarische Prüfzeilen für Betreiber, Datenschutz und Technik.",
"status": "verfügbar"
},
{
"label": "160x150 Seitenvorschau",
"detail": "/cache/screenshots/candyandmore.de-160x150-5f9fa192eafdc6e7a9.png",
"status": "verfügbar"
},
{
"label": "Cookie-Erklärung",
"detail": "2 Cookie-/Storage-Eintrag/Einträge.",
"status": "unauffällig"
},
{
"label": "Empfänger-/Anbieterinventar",
"detail": "2 Anbieterzeile(n), 1 AVV-/Rollenprüfung(en).",
"status": "unauffällig"
},
{
"label": "Barrierefreiheitserklärung-Entwurf",
"detail": "3 bekannte Barrierefreiheits-Punkt(e).",
"status": "Nicht vollständig konform im automatischen Basischeck"
}
],
"available": true,
"final_url": "https://www.candyandmore.de/",
"checked_at": "2026-06-15T03:29:37+00:00",
"share_text": "SaferPage Prüfbeleg candyandmore.de: 45 Browser-Request(s), 2 Drittanbieter, 2 Cookie-/Storage-Einträge, geprüft am 2026-06-15T03:29:37.",
"user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)",
"limitations": [
"Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
"Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
"Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
],
"scan_context": "manual",
"coverage_items": [
{
"label": "HTTP/DNS/TLS",
"value": "HTTP 200 · DNS ok · TLS ok"
},
{
"label": "Browserlauf",
"value": "45 Request(s), 2 Drittanbieter-Domain(s), 1 Browser-Cookie(s)."
},
{
"label": "Consent-Zustände",
"value": "4 Zustand/Zustände: Default, Ablehnen, Akzeptieren und GPC soweit verfügbar."
},
{
"label": "Seitenabdeckung",
"value": "8 priorisierte Unterseite(n) im Nachweispack."
},
{
"label": "Drittanbieter-Auszug",
"value": "2 Anbieterzeile(n) im öffentlichen Nachweis."
},
{
"label": "Cookie-Auszug",
"value": "1 Cookie-Zeile(n) im öffentlichen Nachweis."
}
],
"confidence_score": 92,
"browser_final_url": "https://www.candyandmore.de/"
},
"evidence_integrity_manifest": {
"host": "candyandmore.de",
"status": "verfügbar",
"summary": "Integritätsmanifest für candyandmore.de: 9/9 Nachweisbereich(e) mit SHA-256-Hash dokumentiert.",
"sections": [
{
"id": "audit_receipt",
"hash": "eb6da3fc13c71c24ad96a889fbd7ca5d104c29806030ac455065855b6c46fc0a",
"count": 18,
"label": "Prüfbeleg",
"detail": "Kanonischer JSON-Hash des kompakten Prüfbelegs.",
"status": "verfügbar"
},
{
"id": "protocol",
"hash": "267fd133d06f8abac177088b4aed37a0411e3e3a2188c4e42361951ca24c9b9f",
"count": 15,
"label": "Scan-Protokoll",
"detail": "URL, Endziel, User-Agent, Zeitstempel, HTTP/DNS/TLS und Renderer.",
"status": "verfügbar"
},
{
"id": "checkpoints",
"hash": "bc9523bca7fe1fb38ec99ca3f9f28fd39fcc8ea81421fb9875f3a4bc54bc739d",
"count": 6,
"label": "Prüfschritte",
"detail": "Kanonischer JSON-Hash der dokumentierten Prüfstationen.",
"status": "verfügbar"
},
{
"id": "consent_states",
"hash": "13c755d0b55c48235e7f3924d1711630c1f1626c78d72d546f4f4802cfe91a32",
"count": 4,
"label": "Consent-Zustände",
"detail": "Default-, Ablehnen-, Akzeptieren- und GPC-Nachweise soweit verfügbar.",
"status": "verfügbar"
},
{
"id": "third_party_evidence",
"hash": "3ea1021c43588c38665fcc5803c319436b1ee40dfc89065a97935e0705a13fdd",
"count": 2,
"label": "Drittanbieter-Auszug",
"detail": "Sanitisierte Anbieter-, Kategorie-, Transfer- und Request-Zählwerte.",
"status": "verfügbar"
},
{
"id": "cookie_evidence",
"hash": "d8dfaf188ced6d3efa4a8d2b2d9cf8df7c3b972776e8cd40da085be671c85afc",
"count": 1,
"label": "Cookie-Auszug",
"detail": "Sanitisierte Cookie-Metadaten ohne Cookie-Werte.",
"status": "verfügbar"
},
{
"id": "request_samples",
"hash": "180d46093f4d05f182c0431d94b48c7975514731a3fd0ca0108e27b2c24320c6",
"count": 4,
"label": "Request-Samples",
"detail": "Sanitisierte Drittanbieter-Samples ohne vollständige Request-URLs.",
"status": "verfügbar"
},
{
"id": "checked_pages",
"hash": "2ae31267f68a569ab920cd2dd59374019a732ed5a6def38d4c966f1e6152fec2",
"count": 8,
"label": "Geprüfte Unterseiten",
"detail": "Priorisierte Pfade aus Sitemap, Pflichtseiten und interner Linkstruktur.",
"status": "verfügbar"
},
{
"id": "screenshot_file",
"hash": "1e257e8f84056a6e0eecb7fbe4be0143404874f806a536ec8ba38f715fb3594e",
"count": 8874,
"label": "160x150 Seitenvorschau-Datei",
"detail": "/cache/screenshots/candyandmore.de-160x150-5f9fa192eafdc6e7a9.png",
"status": "verfügbar"
}
],
"algorithm": "sha256",
"available": true,
"root_hash": "a66a8cfcc011bbbb3f2771c44cbecb2c1abd274901297db23a5e8d03ca50c3e5",
"checked_at": "2026-06-15T03:29:37+00:00",
"limitations": [
"Das Manifest schützt die im Report veröffentlichten/sanitisierten Nachweise, nicht verdeckte Cookie-Werte oder vollständige Request-URLs.",
"Ohne externe qualifizierte Zeitstempelung beweist der Hash Integrität des exportierten Artefakts, aber keine amtliche Zustellung."
],
"section_count": 9,
"canonicalization": "JSON UTF-8, sort_keys=true, kompakte Separatoren; Screenshot als rohe Datei-Bytes.",
"available_hash_count": 9
},
"audit_evidence_pack": {
"status": "verfügbar",
"summary": "Nachweisprotokoll mit 45 Browser-Request(s), 1 Cookie-Nachweis(en), 2 Drittanbieter-Auszug/auszügen und 4 Consent-Zustand/Zuständen.",
"protocol": {
"host": "candyandmore.de",
"dns_ok": true,
"tls_ok": true,
"bot_url": "https://saferpage.de/bot",
"renderer": "playwright-chromium",
"final_url": "https://www.candyandmore.de/",
"input_url": "https://candyandmore.de/",
"checked_at": "2026-06-15T03:29:37+00:00",
"user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)",
"http_status": 200,
"scan_context": "manual",
"screenshot_url": "/cache/screenshots/candyandmore.de-160x150-5f9fa192eafdc6e7a9.png",
"googlebot_status": 200,
"browser_final_url": "https://www.candyandmore.de/",
"dns_address_count": 6
},
"checkpoints": [
{
"label": "DNS",
"detail": "6 Adresse(n) aufgelöst.",
"status": "ok"
},
{
"label": "TLS/HTTPS",
"detail": "TLSv1.3",
"status": "ok"
},
{
"label": "HTTP-Abruf",
"detail": "Status 200, Endziel https://www.candyandmore.de/.",
"status": "ok"
},
{
"label": "Browserlauf",
"detail": "45 Request(s), 2 Drittanbieter-Domain(s).",
"status": "ok"
},
{
"label": "Consent-Zustände",
"detail": "Default, Ablehnen, Akzeptieren und GPC werden soweit möglich gegenübergestellt.",
"status": "unauffällig"
},
{
"label": "Exports",
"detail": "PDF/Druck, JSON und CSV enthalten die wesentlichen Prüfnachweise.",
"status": "verfügbar"
}
],
"limitations": [
"Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
"Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
"Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
],
"checked_pages": [
{
"path": "/Cookie-Hinweis",
"source": "homepage_link",
"status": 0,
"category": "cookies"
},
{
"path": "/Damhert-Framboise-Cookies-sugarfree.html",
"source": "homepage_link",
"status": 0,
"category": "cookies"
},
{
"path": "/Diablo-Cookies-with-Strawberry-and-Peanut-Cream-Coating-No-Sugar-Added.html",
"source": "homepage_link",
"status": 0,
"category": "cookies"
},
{
"path": "/index.php",
"source": "homepage_link",
"status": 0,
"category": "login"
},
{
"path": "/Schokoladiges/Schokolade/Schokoladentafeln/Marabou",
"source": "homepage_link",
"status": 0,
"category": "newsletter"
},
{
"path": "/Balance",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/Confiserie/Coppeneur",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/Confiserie/Milka",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
}
],
"cookie_evidence": [
{
"name": "language",
"domain": "candyandmore.de",
"secure": true,
"category": "Funktional",
"provider": "candyandmore.de",
"tracking": false,
"retention": "Session",
"same_site": "Lax",
"pre_consent": true
}
],
"browser_evidence": {
"gpc_enabled": true,
"request_count": 45,
"storage_total": 1,
"accept_clicked": false,
"reject_clicked": false,
"browser_cookie_count": 1,
"contacted_domain_count": 3,
"third_party_domain_count": 2,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 1
},
"storage_evidence": {
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 1
},
"third_party_evidence": [
{
"host": "static.cloudflareinsights.com",
"category": "Analytics",
"provider": "Cloudflare Web Analytics",
"transfer": "Drittland/USA",
"risk_level": "mittel",
"request_count": 1,
"resource_types": [
"script"
],
"privacy_relevant": true
},
{
"host": "mtm.candyandmore.de",
"category": "Sonstige",
"provider": "mtm.candyandmore.de",
"transfer": "EU/EWR",
"risk_level": "niedrig",
"request_count": 3,
"resource_types": [
"ping",
"script"
],
"privacy_relevant": false
}
],
"external_script_count": 0,
"consent_state_evidence": [
{
"label": "Erstaufruf",
"cookie_count": 0,
"domain_count": 2,
"request_count": 4,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 1
},
{
"label": "Nach Ablehnen neu",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "Nach Akzeptieren neu",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "GPC-Aufruf",
"cookie_count": 0,
"domain_count": 2,
"request_count": 3,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 1
}
],
"request_sample_evidence": [
{
"host": "static.cloudflareinsights.com",
"query_keys": [],
"resource_type": "script",
"query_key_count": 0,
"referrer_has_path": false,
"referrer_has_query": false,
"sensitive_query_key_count": 0
},
{
"host": "mtm.candyandmore.de",
"query_keys": [],
"resource_type": "script",
"query_key_count": 0,
"referrer_has_path": false,
"referrer_has_query": false,
"sensitive_query_key_count": 0
},
{
"host": "mtm.candyandmore.de",
"query_keys": [
"action_name",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url"
],
"resource_type": "ping",
"query_key_count": 19,
"referrer_has_path": false,
"referrer_has_query": false,
"sensitive_query_key_count": 0
},
{
"host": "mtm.candyandmore.de",
"query_keys": [
"e_c",
"e_a",
"e_n",
"ca",
"idsite",
"rec",
"r",
"h"
],
"resource_type": "ping",
"query_key_count": 26,
"referrer_has_path": false,
"referrer_has_query": false,
"sensitive_query_key_count": 0
}
]
},
"consent_visual_salience_evidence": {
"schema": "https://saferpage.de/schemas/consent-visual-salience-evidence.v1",
"status": "measured_dom_viewport_signal",
"available": true,
"evidence_level": "dom_viewport_signal_only",
"summary": "Der erste Headless-Chromium-Viewport liefert sichtbare Consent-Control-Signale mit Text, Position, Groesse und typografischen Hinweisen.",
"sample_status": "visible_controls_without_classified_samples",
"classified_sample_count": 0,
"accept_control_count": 0,
"reject_control_count": 0,
"settings_control_count": 0,
"visible_control_count": 28,
"accept_max_area": 0,
"reject_max_area": 0,
"reject_prominence_ratio": "nicht messbar",
"samples": [],
"sample_boundary": "Samples enthalten nur klassifizierte Accept-/Reject-/Settings-Controls. Weitere sichtbare Consent-Controls bleiben als Zaehler erhalten, werden aber ohne Klassifizierung nicht als Ablehnen-, Akzeptieren- oder Einstellungsprobe behauptet.",
"claim_boundary": "Consent-Visual-Salienz ist ein DOM-/Viewport-Signal aus dem ersten Browserlauf. Sie ist keine Rechtsbewertung, kein Dark-Pattern-Endurteil und kein Nachweis fuer spaetere Consent-Zustaende, Scrollbereiche, Loginbereiche oder manuelle Betreiberkontexte."
}
}
Geprüfte Domain-Wurzel: https://candyandmore.de/