consolar.de Datenschutz-Check

{
    "schema": "https://saferpage.de/schemas/public-scan-facts.v1",
    "claim_boundary": "Öffentliche Rohdaten enthalten nur Scan-Fakten, Statuswerte, Evidence-Grenzen und feste Detail-/Hintergrund-Links. Betreiber-Hintergrund, Planungen, Checklisten, Code und allgemeine Empfehlungen sind ausgelagert.",
    "host": "consolar.de",
    "normalized_url": "https://consolar.de/",
    "score": 0,
    "verdict": {
        "color": "red",
        "label": "riskant",
        "score": 0
    },
    "scan_id": "27ddda29-c498-422e-8554-ef599bb6a4b6",
    "created_at": "2026-06-09 23:59:42.959873+02",
    "evidence": {
        "dns": {
            "ok": true,
            "addresses": [
                "64.204.250.18"
            ],
            "duration_ms": 19
        },
        "tls": {
            "ok": true,
            "cipher": "TLS_AES_256_GCM_SHA384",
            "issuer": [
                [
                    [
                        "countryName",
                        "US"
                    ]
                ],
                [
                    [
                        "organizationName",
                        "Let's Encrypt"
                    ]
                ],
                [
                    [
                        "commonName",
                        "R13"
                    ]
                ]
            ],
            "subject": [
                [
                    [
                        "commonName",
                        "consolar.de"
                    ]
                ]
            ],
            "version": "TLSv1.3",
            "not_after": "Aug 25 08:20:44 2026 GMT",
            "hostname_matches": true,
            "days_until_expiry": 76,
            "subject_alt_names": [
                "consolar.de",
                "www.consolar.de"
            ],
            "issuer_common_name": "R13"
        },
        "http": {
            "ok": true,
            "status": 200,
            "headers": {
                "date": "Tue, 09 Jun 2026 21:59:31 GMT",
                "etag": "\"1433-1780857577;;;\"",
                "link": "<https://www.consolar.de/>; rel=shortlink",
                "server": "LiteSpeed",
                "alt-svc": "h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"",
                "connection": "close",
                "content-type": "text/html; charset=UTF-8",
                "transfer-encoding": "chunked",
                "x-litespeed-cache": "hit"
            },
            "body_size": 181925,
            "final_url": "https://www.consolar.de/de/home/",
            "duration_ms": 996
        },
        "scanner": {
            "bot_url": "https://saferpage.de/bot",
            "context": "crawler",
            "user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests)",
            "default_user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)"
        },
        "domain_records": {
            "mx": true,
            "caa": false,
            "spf": true,
            "dmarc": true,
            "dnssec": false
        },
        "googlebot_http": {
            "ok": true,
            "status": 200,
            "headers": {
                "date": "Tue, 09 Jun 2026 21:59:32 GMT",
                "server": "LiteSpeed",
                "alt-svc": "h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"",
                "connection": "close",
                "content-type": "text/html; charset=UTF-8",
                "content-length": "0"
            },
            "body_size": 0,
            "final_url": "https://consolar.de/",
            "duration_ms": 91
        },
        "ai_search_policy_evidence": {
            "files": [
                {
                    "id": "robots_txt",
                    "url": "https://www.consolar.de/robots.txt",
                    "label": "robots.txt",
                    "reason": "",
                    "status": "found",
                    "body_size": 85,
                    "truncated": false,
                    "body_sha256": "789b44c393be61cf4d37a610cede06937ba0868975a14eec2c36270937240dc4",
                    "duration_ms": 34,
                    "http_status": 200,
                    "ai_bot_policy": {
                        "bot_directives": [],
                        "explicit_ai_bots": [],
                        "explicit_ai_bot_count": 0,
                        "wildcard_directive_count": 3,
                        "wildcard_directives_sample": [
                            {
                                "value": "/wp-admin/",
                                "directive": "disallow"
                            },
                            {
                                "value": "/wp-admin/admin-ajax.php",
                                "directive": "allow"
                            },
                            {
                                "value": "*.pdf",
                                "directive": "disallow"
                            }
                        ]
                    },
                    "relevant_lines": [
                        "User-agent: *",
                        "Disallow: /wp-admin/",
                        "Allow: /wp-admin/admin-ajax.php",
                        "Disallow: *.pdf"
                    ]
                },
                {
                    "id": "llms_txt",
                    "url": "https://www.consolar.de/llms.txt",
                    "label": "llms.txt",
                    "reason": "http_error",
                    "status": "missing",
                    "body_size": 0,
                    "truncated": false,
                    "body_sha256": "",
                    "duration_ms": 532,
                    "http_status": 404,
                    "relevant_lines": []
                },
                {
                    "id": "ai_txt",
                    "url": "https://www.consolar.de/.well-known/ai.txt",
                    "label": "AI Policy",
                    "reason": "http_error",
                    "status": "missing",
                    "body_size": 0,
                    "truncated": false,
                    "body_sha256": "",
                    "duration_ms": 362,
                    "http_status": 404,
                    "relevant_lines": []
                },
                {
                    "id": "ai_policy_txt",
                    "url": "https://www.consolar.de/.well-known/ai-policy.txt",
                    "label": "AI Policy",
                    "reason": "http_error",
                    "status": "missing",
                    "body_size": 0,
                    "truncated": false,
                    "body_sha256": "",
                    "duration_ms": 336,
                    "http_status": 404,
                    "relevant_lines": []
                },
                {
                    "id": "ward_txt",
                    "url": "https://www.consolar.de/.well-known/ward.txt",
                    "label": "WARD Policy",
                    "reason": "http_error",
                    "status": "missing",
                    "body_size": 0,
                    "truncated": false,
                    "body_sha256": "",
                    "duration_ms": 329,
                    "http_status": 404,
                    "relevant_lines": []
                }
            ],
            "origin": "https://www.consolar.de",
            "schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
            "status": "checked",
            "metrics": {
                "file_count": 5,
                "found_file_count": 1,
                "policy_file_count": 0,
                "explicit_ai_bot_count": 0
            },
            "summary": "1 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
            "available": true,
            "guardrails": [
                "Nur feste Same-Origin-Policy-Dateien",
                "Keine Off-Host-Redirects",
                "64-KB-Body-Limit",
                "Öffentlich nur Hash, Status und kurze relevante Zeilen"
            ],
            "known_ai_bots": [
                "GPTBot",
                "ChatGPT-User",
                "Google-Extended",
                "ClaudeBot",
                "PerplexityBot",
                "CCBot"
            ],
            "explicit_ai_bots": [],
            "policy_file_count": 0,
            "llms_ward_policy_status": "not_publicly_verified",
            "robots_ai_policy_status": "generic_robots_policy"
        }
    },
    "findings": [
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2012-6707: WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2012-6707",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-4338: wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by trigger",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-4338",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-4339: WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted strin",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-4339",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-2213: SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-2213",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-2221: Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web s",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-2221",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-4029: WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF prote",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-4029",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5832: The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5832",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5835: WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5835",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5836: The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5836",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5837: WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5837",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5838: WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5838",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5839: WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5839",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-6635: Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-6635",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14723: Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14723",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-16510: WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as d",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-16510",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-17091: wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-17091",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5489: Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5489",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5492: Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of u",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5492",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5493: wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers t",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5493",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5611: SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the pres",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5611",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-9062: In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-9062",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-9064: In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-9064",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-9065: In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-9065",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-9066: In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "critical",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-9066",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2012-3384: Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2012-3384",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2012-3385: WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive informatio",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2012-3385",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2012-4421: The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass in",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2012-4421",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-0235: The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL fo",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-0235",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-0236: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortc",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-0236",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-0237: Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-0237",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2199: The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) is",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2199",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2200: WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reass",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2200",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2201: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) uploads of med",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2201",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2202: WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity r",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2202",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2203: WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the ab",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2203",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2204: moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a # (pound sign) charac",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2204",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-2205: The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, which allows remote attackers to bypass the Same Origin Policy a",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-2205",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-5738: The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfiltered_html capability for uploads of .htm and .html files, whic",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-5738",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-0165: WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-ad",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-0165",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-0166: The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookie",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-0166",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-5204: wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it eas",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-5204",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-5205: wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote at",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-5205",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-5265: The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion durin",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-5265",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-5266: The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-5266",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9031: Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitra",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9031",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9034: wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consu",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9034",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9035: Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arb",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9035",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9036: Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web scr",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9036",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9037: WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an im",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9037",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9038: wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) a",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9038",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-9039: wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-ma",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-9039",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-3438: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-3438",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-3440: Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that i",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-3440",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5623: WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by lever",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5623",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5714: Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML ele",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5714",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5715: The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access res",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5715",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5730: The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time comparison for widgets, which allows remo",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5730",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5731: Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests t",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5731",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5732: Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers t",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5732",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5733: Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject a",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5733",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5734: Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary w",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5734",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-7989: Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-m",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-7989",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-8834: Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that i",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-8834",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-10148: The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which a",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-10148",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-1564: Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-1564",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-4566: Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script o",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-4566",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-4567: Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitr",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-4567",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5833: Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5833",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-5834: Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitra",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-5834",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-6634: Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-6634",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-6897: Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijac",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-6897",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-7168: Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitra",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-7168",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-7169: Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 al",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-7169",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2016-9263: WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection (XSF) attacks by leveraging",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2016-9263",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14718: Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14718",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14720: Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14720",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14721: Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14721",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14724: Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14724",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14725: Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14725",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-14726: Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-14726",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-17092: wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attac",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-17092",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-17093: wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-17093",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-17094: wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-17094",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5487: wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors,",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5487",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5488: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1)",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5488",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5490: Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbi",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5490",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5491: wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5491",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5610: wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5610",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-5612: Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbi",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-5612",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-6814: In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-6814",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-6815: In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-6815",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-6816: In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-6816",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-6817: In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-6817",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-6818: In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-6818",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-6819: In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-6819",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-8295: WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a craf",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-8295",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-9061: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presen",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-9061",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2017-9063: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2017-9063",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2023-2745: WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "warning",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2023-2745",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2012-4422: wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activati",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "info",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2012-4422",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-4340: wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "info",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-4340",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2013-5739: The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "info",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2013-5739",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2014-5240: Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arb",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "info",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2014-5240",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "known_vulnerability_advisory",
            "title": "CVE-2015-5622: Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor",
            "public": true,
            "version": "3.3.44",
            "audience": "nutzer",
            "category": "vulnerability",
            "severity": "info",
            "confirmed": true,
            "technology": "WordPress",
            "advisory_id": "CVE-2015-5622",
            "user_importance": 135,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "googlebot_redirect_mismatch",
            "title": "Googlebot wird anders weitergeleitet",
            "public": true,
            "audience": "nutzer",
            "category": "seo",
            "severity": "warning",
            "user_importance": 134,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "pre_consent_tracking_cookies",
            "title": "Tracking-Cookies vor Einwilligung gesetzt",
            "public": true,
            "source": "chromium_cookie_inventory",
            "cookies": [
                "_ga",
                "_ga_B219F06924",
                "_ga_GJQR2QFHW9",
                "_gat",
                "_gid"
            ],
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 128,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "third_party_sensitive_query_leak",
            "count": 2,
            "title": "Sensible URL-Schlüssel im Drittanbieter-Kontext",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 126,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "long_lived_tracking_cookie",
            "count": 3,
            "title": "Langlebige Tracking-/Marketing-Cookies",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 122,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "consent_no_reject_option",
            "title": "Cookie-Hinweis ohne klare Ablehnen-Option",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 121,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "google_consent_mode_missing",
            "title": "Google Consent Mode Default nicht erkannt",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 120,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "third_party_page_url_parameter",
            "count": 3,
            "title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 118,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "pii_tracking_on_data_entry_page",
            "title": "Dateneingabe und datenschutzrelevante Drittanbieter im selben Browseraufruf",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 118,
            "importance_label": "Wichtig für Nutzer",
            "third_party_count": 3
        },
        {
            "id": "external_canonical",
            "title": "Canonical zeigt auf fremde Domain",
            "public": true,
            "audience": "nutzer",
            "category": "seo",
            "severity": "warning",
            "canonical_url": "https://www.consolar.de/de/home/",
            "user_importance": 118,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "gpc_privacy_domains_present",
            "count": 3,
            "title": "Datenschutzrelevante Kontakte trotz GPC-Signal",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "info",
            "user_importance": 116,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "beacon_api_usage",
            "count": 5,
            "title": "Beacon-/Keepalive-Telemetrie erkannt",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 116,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "privacy_policy_provider_disclosure_gap",
            "title": "Erkannte Anbieter fehlen in der Datenschutzerklärung",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 116,
            "importance_label": "Wichtig für Nutzer",
            "missing_providers": [
                "Google Tag Manager"
            ]
        },
        {
            "id": "external_link_spam",
            "title": "Sehr viele externe Links erkannt",
            "public": true,
            "audience": "nutzer",
            "category": "seo",
            "severity": "warning",
            "user_importance": 116,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "consent_state_gpc_evidence_review",
            "title": "Consent-Zustand: GPC mit Tracking-Hinweisen",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "info",
            "user_importance": 112,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "long_lived_cookie",
            "count": 2,
            "title": "Langlebige Cookies erkannt",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "info",
            "user_importance": 104,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "privacy_policy_update_date_missing",
            "title": "Stand der Datenschutzerklärung nicht klar erkennbar",
            "public": true,
            "audience": "nutzer",
            "category": "privacy",
            "severity": "info",
            "user_importance": 94,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "form_label_missing",
            "count": 13,
            "title": "Formularfelder ohne klare Beschriftung",
            "public": true,
            "audience": "nutzer",
            "category": "accessibility",
            "severity": "warning",
            "user_importance": 92,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "missing_meta_description",
            "title": "Meta-Description fehlt",
            "public": true,
            "audience": "nutzer",
            "category": "content",
            "severity": "info",
            "user_importance": 84,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "image_alt_missing",
            "count": 7,
            "title": "Bilder ohne Alternativtext",
            "public": true,
            "audience": "nutzer",
            "category": "accessibility",
            "severity": "info",
            "user_importance": 82,
            "importance_label": "Wichtig für Nutzer"
        },
        {
            "id": "missing_hsts",
            "title": "HSTS fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "warning",
            "user_importance": 78,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "cmp_api_not_detected",
            "title": "Keine gängige CMP-/TCF-API im Browser erkannt",
            "public": true,
            "audience": "betreiber",
            "category": "privacy",
            "severity": "info",
            "user_importance": 74,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "too_many_render_blocking_assets",
            "title": "Viele potenziell blockierende Assets",
            "public": true,
            "audience": "betreiber",
            "category": "performance",
            "severity": "info",
            "user_importance": 74,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_csp",
            "title": "Content-Security-Policy fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "warning",
            "user_importance": 72,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_x_frame_options",
            "title": "X-Frame-Options fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "warning",
            "user_importance": 70,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_x_content_type_options",
            "title": "X-Content-Type-Options fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "warning",
            "user_importance": 70,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_cross_origin_embedder_policy",
            "title": "Cross-Origin-Embedder-Policy fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "info",
            "user_importance": 68,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_cross_origin_opener_policy",
            "title": "Cross-Origin-Opener-Policy fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "info",
            "user_importance": 66,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_cross_origin_resource_policy",
            "title": "Cross-Origin-Resource-Policy fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "info",
            "user_importance": 64,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "browser_privacy_relevant_third_parties",
            "title": "Datenschutzrelevante Drittanbieter im Browseraufruf",
            "public": true,
            "audience": "betreiber",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 60,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "third_country_transfer_review",
            "title": "Drittland-/US-Anbieter im Browseraufruf prüfen",
            "public": true,
            "audience": "betreiber",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 60,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "consent_banner_dark_pattern_risk",
            "count": 1,
            "title": "Consent-Banner mit Dark-Pattern-/UX-Risiko",
            "public": true,
            "audience": "betreiber",
            "category": "privacy",
            "severity": "warning",
            "user_importance": 60,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_referrer_policy",
            "title": "Referrer-Policy fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "info",
            "user_importance": 40,
            "importance_label": "Technischer Hinweis"
        },
        {
            "id": "missing_permissions_policy",
            "title": "Permissions-Policy fehlt",
            "public": true,
            "audience": "betreiber",
            "category": "security_headers",
            "severity": "info",
            "user_importance": 40,
            "importance_label": "Technischer Hinweis"
        }
    ],
    "audit_modules": [
        {
            "id": "privacy_consent",
            "color": "red",
            "score": 2,
            "title": "Datenschutz, Cookies & Consent",
            "source": "Browser, HTTP-Header, HTML und Consent-/Cookie-Heuristik",
            "status": "kritisch",
            "evidence": "0 Tracking-Script(s), 7 Cookie(s) vor Einwilligung, 5 Tracking-Cookie(s), Ablehnen-Option: nein, Consent-Audit: 2."
        },
        {
            "id": "browser_evidence",
            "color": "red",
            "score": 19,
            "title": "Browser-Nachweis",
            "source": "Headless Chromium mit Screenshot- und Request-Telemetrie",
            "status": "kritisch",
            "evidence": "52 Request(s), 3 Drittanbieter-Domain(s), davon 3 datenschutzrelevant, 7 Browser-Cookie(s), Transfer-Prüfbedarf: 3, Referrer-/URL-Leaks: 2, Fingerprinting-/Replay-Hinweise: 0."
        },
        {
            "id": "seo_integrity",
            "color": "red",
            "score": 20,
            "title": "SEO-Integrität & Cloaking",
            "source": "HTML-Inhalt, strukturierte Daten, Links und Googlebot-Vergleich",
            "status": "kritisch",
            "evidence": "3 SEO-Spam-Hinweis(e), 1 Cloaking-Hinweis(e)."
        },
        {
            "id": "cookie_inventory",
            "color": "red",
            "score": 24,
            "title": "Cookie-Inventar",
            "source": "HTTP-Set-Cookie und Chromium-Cookies beim ersten Seitenaufruf",
            "status": "kritisch",
            "evidence": "7 Cookie(s), 5 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 5 langlebig, 0 sehr lang."
        },
        {
            "id": "referrer_url_leaks",
            "color": "red",
            "score": 25,
            "title": "Referrer & URL-Leaks",
            "source": "Chromium-Request-Telemetrie ohne gespeicherte Parameterwerte",
            "status": "kritisch",
            "evidence": "2 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 2 sensible Query-Kontexte."
        },
        {
            "id": "security_tls",
            "color": "red",
            "score": 34,
            "title": "Sicherheit, TLS & Header",
            "source": "DNS, TLS, HTTP-Status, Zertifikat und Security-Header",
            "status": "kritisch",
            "evidence": "1 Infrastruktur-Hinweis(e), Security-Header: 0/9 vorhanden, 9 fehlen, externe Skript-Hosts: 0."
        },
        {
            "id": "accessibility_usability",
            "color": "red",
            "score": 41,
            "title": "Barrierefreiheit & Usability",
            "source": "Passives HTML-Sample: Bilder, Formulare, Buttons, Sprache, Headings und Viewport",
            "status": "kritisch",
            "evidence": "7 Bild(er) ohne alt, 13 Formularfeld(er) ohne Beschriftung, 0 Button(s) ohne Namen."
        },
        {
            "id": "google_third_parties",
            "color": "orange",
            "score": 54,
            "title": "Google-Dienste & Drittanbieter",
            "source": "Chromium-Requests, Anbieterklassifikation und Google Consent Mode Heuristik",
            "status": "auffällig",
            "evidence": "Google-Tags: ja, 3 Google-nahe Domain(s), Consent-Default: nein, Analytics: ja, Werbung: nein, Fonts: nein."
        },
        {
            "id": "tracking_pixels_beacons",
            "color": "orange",
            "score": 60,
            "title": "Tracking-Pixel & Beacons",
            "source": "HTML-Pixel, Link-Ping-Attribute, Chromium-Requests und Browser-API-Instrumentierung",
            "status": "auffällig",
            "evidence": "0 Pixel-/Bildtracking-Hinweis(e), 5 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s)."
        },
        {
            "id": "consent_journey",
            "color": "yellow",
            "score": 76,
            "title": "Consent-Journey-Matrix",
            "source": "Chromium-Zustände: Erstaufruf, Reject, Accept und GPC",
            "status": "prüfen",
            "evidence": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 3 im GPC-Aufruf."
        },
        {
            "id": "forms_payments",
            "color": "yellow",
            "score": 82,
            "title": "Formulare, Login & Zahlung",
            "source": "HTML-Formulare, Eingabefelder, Zahlungsanbieter und Kontextlinks",
            "status": "prüfen",
            "evidence": "Die Seite kann Name/personenbezogene Daten, Newsletter, Kontaktformular abfragen."
        },
        {
            "id": "pii_exposure",
            "color": "yellow",
            "score": 82,
            "title": "PII, URL-Parameter & Datenleck-Schutz",
            "source": "URL-Parameter, interne Links, HTML-Formulare, Browser-Drittanbieter und Dateneingabe-Kontext",
            "status": "prüfen",
            "evidence": "1 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext."
        },
        {
            "id": "performance_mobile",
            "color": "green",
            "score": 94,
            "title": "Performance & mobile Nutzbarkeit",
            "source": "HTTP-Antwort, HTML-Größe, Komprimierung und mobile Basis",
            "status": "unauffällig",
            "evidence": "Performance-Score 94, Antwortzeit 996 ms."
        },
        {
            "id": "site_coverage",
            "color": "green",
            "score": 95,
            "title": "Seitenabdeckung & Crawl",
            "source": "Startseiten-Links, Compliance-Links und begrenzter interner Zusatzabruf",
            "status": "unauffällig",
            "evidence": "30 interne Linkziele erkannt, 4 priorisierte Unterseite(n) abgerufen."
        },
        {
            "id": "embedded_content",
            "color": "green",
            "score": 100,
            "title": "Externe Inhalte & Widgets",
            "source": "HTML-Embeds und Chromium-Drittanbieter-Requests",
            "status": "unauffällig",
            "evidence": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen."
        },
        {
            "id": "script_supply_chain",
            "color": "green",
            "score": 100,
            "title": "Externe Skripte & SRI",
            "source": "HTML-Script-Tags, Anbieterklassifikation und SRI-Attribute",
            "status": "unauffällig",
            "evidence": "0 externe Skript(e) von 0 Host(s), 0 ohne SRI, 0 Tracking-/Tag-nahe Skript(e)."
        },
        {
            "id": "operator_transparency",
            "color": "green",
            "score": 100,
            "title": "Impressum, Kontakt & Datenschutzerklärung",
            "source": "Deutschsprachige Betreiber- und Datenschutzhinweis-Erkennung",
            "status": "unauffällig",
            "evidence": "Impressum: ja, Datenschutz: ja, Kontakt: ja."
        }
    ],
    "ai_search_policy_evidence": {
        "files": [
            {
                "id": "robots_txt",
                "url": "https://www.consolar.de/robots.txt",
                "label": "robots.txt",
                "reason": "",
                "status": "found",
                "body_size": 85,
                "truncated": false,
                "body_sha256": "789b44c393be61cf4d37a610cede06937ba0868975a14eec2c36270937240dc4",
                "duration_ms": 34,
                "http_status": 200,
                "ai_bot_policy": {
                    "bot_directives": [],
                    "explicit_ai_bots": [],
                    "explicit_ai_bot_count": 0,
                    "wildcard_directive_count": 3,
                    "wildcard_directives_sample": [
                        {
                            "value": "/wp-admin/",
                            "directive": "disallow"
                        },
                        {
                            "value": "/wp-admin/admin-ajax.php",
                            "directive": "allow"
                        },
                        {
                            "value": "*.pdf",
                            "directive": "disallow"
                        }
                    ]
                },
                "relevant_lines": [
                    "User-agent: *",
                    "Disallow: /wp-admin/",
                    "Allow: /wp-admin/admin-ajax.php",
                    "Disallow: *.pdf"
                ]
            },
            {
                "id": "llms_txt",
                "url": "https://www.consolar.de/llms.txt",
                "label": "llms.txt",
                "reason": "http_error",
                "status": "missing",
                "body_size": 0,
                "truncated": false,
                "body_sha256": "",
                "duration_ms": 532,
                "http_status": 404,
                "relevant_lines": []
            },
            {
                "id": "ai_txt",
                "url": "https://www.consolar.de/.well-known/ai.txt",
                "label": "AI Policy",
                "reason": "http_error",
                "status": "missing",
                "body_size": 0,
                "truncated": false,
                "body_sha256": "",
                "duration_ms": 362,
                "http_status": 404,
                "relevant_lines": []
            },
            {
                "id": "ai_policy_txt",
                "url": "https://www.consolar.de/.well-known/ai-policy.txt",
                "label": "AI Policy",
                "reason": "http_error",
                "status": "missing",
                "body_size": 0,
                "truncated": false,
                "body_sha256": "",
                "duration_ms": 336,
                "http_status": 404,
                "relevant_lines": []
            },
            {
                "id": "ward_txt",
                "url": "https://www.consolar.de/.well-known/ward.txt",
                "label": "WARD Policy",
                "reason": "http_error",
                "status": "missing",
                "body_size": 0,
                "truncated": false,
                "body_sha256": "",
                "duration_ms": 329,
                "http_status": 404,
                "relevant_lines": []
            }
        ],
        "origin": "https://www.consolar.de",
        "schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
        "status": "checked",
        "metrics": {
            "file_count": 5,
            "found_file_count": 1,
            "policy_file_count": 0,
            "explicit_ai_bot_count": 0
        },
        "summary": "1 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
        "available": true,
        "guardrails": [
            "Nur feste Same-Origin-Policy-Dateien",
            "Keine Off-Host-Redirects",
            "64-KB-Body-Limit",
            "Öffentlich nur Hash, Status und kurze relevante Zeilen"
        ],
        "known_ai_bots": [
            "GPTBot",
            "ChatGPT-User",
            "Google-Extended",
            "ClaudeBot",
            "PerplexityBot",
            "CCBot"
        ],
        "explicit_ai_bots": [],
        "policy_file_count": 0,
        "llms_ward_policy_status": "not_publicly_verified",
        "robots_ai_policy_status": "generic_robots_policy"
    },
    "site_coverage_analysis": {
        "color": "green",
        "pages": [
            {
                "url": "https://www.consolar.de/de/datenschutz",
                "path": "/de/datenschutz",
                "text": "Datenschutz",
                "source": "homepage_link+sitemap",
                "category": "datenschutz",
                "priority": 104
            },
            {
                "url": "https://www.consolar.de/en/privacy-policy",
                "path": "/en/privacy-policy",
                "text": "",
                "source": "sitemap",
                "category": "datenschutz",
                "priority": 104
            },
            {
                "url": "https://www.consolar.de/de/impressum",
                "path": "/de/impressum",
                "text": "Impressum",
                "source": "homepage_link",
                "category": "impressum",
                "priority": 96
            },
            {
                "url": "https://www.consolar.de/de/cookie-einstellungen",
                "path": "/de/cookie-einstellungen",
                "text": "Cookies",
                "source": "homepage_link+sitemap",
                "category": "cookies",
                "priority": 90
            },
            {
                "url": "https://www.consolar.de/de/kontakt",
                "path": "/de/kontakt",
                "text": "Kontakt",
                "source": "homepage_link",
                "category": "kontakt",
                "priority": 90
            },
            {
                "url": "https://www.consolar.de/en/terms",
                "path": "/en/terms",
                "text": "",
                "source": "sitemap",
                "category": "agb",
                "priority": 84
            },
            {
                "url": "https://www.consolar.de/de/agb",
                "path": "/de/agb",
                "text": "AGB",
                "source": "homepage_link",
                "category": "agb",
                "priority": 80
            },
            {
                "url": "https://www.consolar.de/de/newsletter",
                "path": "/de/newsletter",
                "text": "Newsletter",
                "source": "homepage_link+sitemap",
                "category": "newsletter",
                "priority": 68
            },
            {
                "url": "https://www.consolar.de/en/about-consolar/guiding-concept-and-vision",
                "path": "/en/about-consolar/guiding-concept-and-vision",
                "text": "",
                "source": "sitemap",
                "category": "newsletter",
                "priority": 68
            },
            {
                "url": "https://www.consolar.de/en/about-consolar/research-and-development",
                "path": "/en/about-consolar/research-and-development",
                "text": "",
                "source": "sitemap",
                "category": "newsletter",
                "priority": 68
            },
            {
                "url": "https://www.consolar.de/en/newsletter-en",
                "path": "/en/newsletter-en",
                "text": "",
                "source": "sitemap",
                "category": "newsletter",
                "priority": 68
            },
            {
                "url": "https://www.consolar.de/it/newsletter-it",
                "path": "/it/newsletter-it",
                "text": "",
                "source": "sitemap",
                "category": "newsletter",
                "priority": 68
            }
        ],
        "score": 95,
        "status": "unauffällig",
        "summary": "30 interne Linkziele erkannt (120 aus Sitemap), 4 priorisierte Unterseite(n) zusätzlich abgerufen.",
        "findings": [
            {
                "id": "privacy_policy_update_date_missing",
                "title": "Stand der Datenschutzerklärung nicht klar erkennbar",
                "public": true,
                "category": "privacy",
                "severity": "info"
            },
            {
                "id": "privacy_policy_provider_disclosure_gap",
                "title": "Erkannte Anbieter fehlen in der Datenschutzerklärung",
                "public": true,
                "category": "privacy",
                "severity": "warning",
                "missing_providers": [
                    "Google Tag Manager"
                ]
            }
        ],
        "categories": {
            "agb": 2,
            "cookies": 1,
            "kontakt": 1,
            "impressum": 1,
            "newsletter": 5,
            "unterseite": 18,
            "datenschutz": 2
        },
        "sample_limit": 4,
        "sampled_count": 4,
        "sampled_pages": [
            {
                "ok": true,
                "url": "https://www.consolar.de/de/datenschutz",
                "path": "/de/datenschutz",
                "audit": {
                    "form_count": 0,
                    "finding_ids": [
                        "consent_no_reject_option"
                    ],
                    "cookie_count": 0,
                    "imprint_found": true,
                    "consent_hint_found": true,
                    "reject_option_found": false,
                    "privacy_policy_found": true,
                    "tracking_script_count": 0,
                    "pre_consent_cookie_count": 0,
                    "pre_consent_tracking_cookie_count": 0
                },
                "forms": 0,
                "title": "Datenschutz - Consolar Solare Energiesysteme GmbH",
                "status": 200,
                "category": "datenschutz",
                "duration_ms": 261,
                "privacy_hint": true,
                "privacy_policy_audit": {
                    "url": "https://www.consolar.de/de/datenschutz",
                    "color": "green",
                    "found": [
                        "Verantwortlicher / Anbieter",
                        "Kontakt / Datenschutzkontakt",
                        "Zwecke der Verarbeitung",
                        "Rechtsgrundlagen",
                        "Betroffenenrechte",
                        "Speicherfrist / Löschung",
                        "Empfänger / Auftragsverarbeiter",
                        "Cookies / Tracking",
                        "Widerruf / Opt-out",
                        "Beschwerde bei Aufsichtsbehörde",
                        "Drittlandtransfer",
                        "Datenschutzkontakt / DPO-Hinweis",
                        "Verständliche Satzlänge"
                    ],
                    "score": 93,
                    "checks": [
                        {
                            "id": "controller_identity",
                            "found": true,
                            "label": "Verantwortlicher / Anbieter"
                        },
                        {
                            "id": "contact",
                            "found": true,
                            "label": "Kontakt / Datenschutzkontakt"
                        },
                        {
                            "id": "purposes",
                            "found": true,
                            "label": "Zwecke der Verarbeitung"
                        },
                        {
                            "id": "legal_basis",
                            "found": true,
                            "label": "Rechtsgrundlagen"
                        },
                        {
                            "id": "rights",
                            "found": true,
                            "label": "Betroffenenrechte"
                        },
                        {
                            "id": "retention",
                            "found": true,
                            "label": "Speicherfrist / Löschung"
                        },
                        {
                            "id": "recipients",
                            "found": true,
                            "label": "Empfänger / Auftragsverarbeiter"
                        },
                        {
                            "id": "cookies_tracking",
                            "found": true,
                            "label": "Cookies / Tracking"
                        },
                        {
                            "id": "withdrawal",
                            "found": true,
                            "label": "Widerruf / Opt-out"
                        },
                        {
                            "id": "complaint_authority",
                            "found": true,
                            "label": "Beschwerde bei Aufsichtsbehörde"
                        },
                        {
                            "id": "third_country_transfer",
                            "found": true,
                            "label": "Drittlandtransfer"
                        },
                        {
                            "id": "update_date",
                            "found": false,
                            "label": "Stand / Aktualitätsdatum",
                            "detail": ""
                        },
                        {
                            "id": "dpo_contact",
                            "found": true,
                            "label": "Datenschutzkontakt / DPO-Hinweis"
                        },
                        {
                            "id": "readability",
                            "found": true,
                            "label": "Verständliche Satzlänge",
                            "detail": "23.6 Wörter/Satz"
                        }
                    ],
                    "status": "unauffällig",
                    "missing": [
                        "Stand / Aktualitätsdatum"
                    ],
                    "summary": "13 von 14 zentralen Datenschutz-Bausteinen erkannt.",
                    "findings": [
                        {
                            "id": "privacy_policy_update_date_missing",
                            "title": "Stand der Datenschutzerklärung nicht klar erkennbar",
                            "public": true,
                            "category": "privacy",
                            "severity": "info"
                        }
                    ],
                    "available": true,
                    "freshness": {
                        "stale": false,
                        "age_days": null,
                        "last_updated": "",
                        "update_date_found": false
                    },
                    "word_count": 6421,
                    "readability": {
                        "hard_to_read": false,
                        "sentence_count": 272,
                        "avg_sentence_words": 23.6
                    },
                    "missing_count": 1,
                    "dpo_contact_found": true
                }
            },
            {
                "ok": true,
                "url": "https://www.consolar.de/en/privacy-policy",
                "path": "/en/privacy-policy",
                "audit": {
                    "form_count": 0,
                    "finding_ids": [
                        "imprint_missing",
                        "privacy_policy_too_thin",
                        "consent_no_reject_option",
                        "consent_accept_only"
                    ],
                    "cookie_count": 0,
                    "imprint_found": false,
                    "consent_hint_found": true,
                    "reject_option_found": false,
                    "privacy_policy_found": true,
                    "tracking_script_count": 0,
                    "pre_consent_cookie_count": 0,
                    "pre_consent_tracking_cookie_count": 0
                },
                "forms": 0,
                "title": "Privacy Policy - Consolar Solare Energiesysteme GmbH",
                "status": 200,
                "category": "datenschutz",
                "duration_ms": 251,
                "privacy_hint": true,
                "privacy_policy_audit": {
                    "url": "https://www.consolar.de/en/privacy-policy",
                    "color": "green",
                    "found": [
                        "Verantwortlicher / Anbieter",
                        "Kontakt / Datenschutzkontakt",
                        "Zwecke der Verarbeitung",
                        "Rechtsgrundlagen",
                        "Betroffenenrechte",
                        "Speicherfrist / Löschung",
                        "Empfänger / Auftragsverarbeiter",
                        "Cookies / Tracking",
                        "Widerruf / Opt-out",
                        "Beschwerde bei Aufsichtsbehörde",
                        "Drittlandtransfer",
                        "Datenschutzkontakt / DPO-Hinweis",
                        "Verständliche Satzlänge"
                    ],
                    "score": 93,
                    "checks": [
                        {
                            "id": "controller_identity",
                            "found": true,
                            "label": "Verantwortlicher / Anbieter"
                        },
                        {
                            "id": "contact",
                            "found": true,
                            "label": "Kontakt / Datenschutzkontakt"
                        },
                        {
                            "id": "purposes",
                            "found": true,
                            "label": "Zwecke der Verarbeitung"
                        },
                        {
                            "id": "legal_basis",
                            "found": true,
                            "label": "Rechtsgrundlagen"
                        },
                        {
                            "id": "rights",
                            "found": true,
                            "label": "Betroffenenrechte"
                        },
                        {
                            "id": "retention",
                            "found": true,
                            "label": "Speicherfrist / Löschung"
                        },
                        {
                            "id": "recipients",
                            "found": true,
                            "label": "Empfänger / Auftragsverarbeiter"
                        },
                        {
                            "id": "cookies_tracking",
                            "found": true,
                            "label": "Cookies / Tracking"
                        },
                        {
                            "id": "withdrawal",
                            "found": true,
                            "label": "Widerruf / Opt-out"
                        },
                        {
                            "id": "complaint_authority",
                            "found": true,
                            "label": "Beschwerde bei Aufsichtsbehörde"
                        },
                        {
                            "id": "third_country_transfer",
                            "found": true,
                            "label": "Drittlandtransfer"
                        },
                        {
                            "id": "update_date",
                            "found": false,
                            "label": "Stand / Aktualitätsdatum",
                            "detail": ""
                        },
                        {
                            "id": "dpo_contact",
                            "found": true,
                            "label": "Datenschutzkontakt / DPO-Hinweis"
                        },
                        {
                            "id": "readability",
                            "found": true,
                            "label": "Verständliche Satzlänge",
                            "detail": "26.9 Wörter/Satz"
                        }
                    ],
                    "status": "unauffällig",
                    "missing": [
                        "Stand / Aktualitätsdatum"
                    ],
                    "summary": "13 von 14 zentralen Datenschutz-Bausteinen erkannt.",
                    "findings": [
                        {
                            "id": "privacy_policy_update_date_missing",
                            "title": "Stand der Datenschutzerklärung nicht klar erkennbar",
                            "public": true,
                            "category": "privacy",
                            "severity": "info"
                        }
                    ],
                    "available": true,
                    "freshness": {
                        "stale": false,
                        "age_days": null,
                        "last_updated": "",
                        "update_date_found": false
                    },
                    "word_count": 6877,
                    "readability": {
                        "hard_to_read": false,
                        "sentence_count": 256,
                        "avg_sentence_words": 26.9
                    },
                    "missing_count": 1,
                    "dpo_contact_found": true
                }
            },
            {
                "ok": true,
                "url": "https://www.consolar.de/de/impressum",
                "path": "/de/impressum",
                "audit": {
                    "form_count": 0,
                    "finding_ids": [
                        "privacy_policy_too_thin",
                        "consent_no_reject_option",
                        "consent_accept_only"
                    ],
                    "cookie_count": 0,
                    "imprint_found": true,
                    "consent_hint_found": true,
                    "reject_option_found": false,
                    "privacy_policy_found": true,
                    "tracking_script_count": 0,
                    "pre_consent_cookie_count": 0,
                    "pre_consent_tracking_cookie_count": 0
                },
                "forms": 0,
                "title": "Impressum - Consolar Solare Energiesysteme GmbH",
                "status": 200,
                "category": "impressum",
                "duration_ms": 77,
                "privacy_hint": true,
                "privacy_policy_audit": []
            },
            {
                "ok": true,
                "url": "https://www.consolar.de/de/cookie-einstellungen",
                "path": "/de/cookie-einstellungen",
                "audit": {
                    "form_count": 0,
                    "finding_ids": [
                        "privacy_policy_too_thin",
                        "consent_no_reject_option",
                        "consent_accept_only"
                    ],
                    "cookie_count": 0,
                    "imprint_found": true,
                    "consent_hint_found": true,
                    "reject_option_found": false,
                    "privacy_policy_found": true,
                    "tracking_script_count": 0,
                    "pre_consent_cookie_count": 0,
                    "pre_consent_tracking_cookie_count": 0
                },
                "forms": 0,
                "title": "Cookies - Consolar Solare Energiesysteme GmbH",
                "status": 200,
                "category": "cookies",
                "duration_ms": 225,
                "privacy_hint": true,
                "privacy_policy_audit": []
            }
        ],
        "sitemap_sources": [
            "https://www.consolar.de/sitemap.xml",
            "https://www.consolar.de/post-sitemap.xml",
            "https://www.consolar.de/page-sitemap.xml"
        ],
        "sitemap_available": true,
        "sitemap_url_count": 120,
        "homepage_link_count": 84,
        "internal_link_count": 30,
        "privacy_policy_audit": {
            "url": "https://www.consolar.de/de/datenschutz",
            "color": "green",
            "found": [
                "Verantwortlicher / Anbieter",
                "Kontakt / Datenschutzkontakt",
                "Zwecke der Verarbeitung",
                "Rechtsgrundlagen",
                "Betroffenenrechte",
                "Speicherfrist / Löschung",
                "Empfänger / Auftragsverarbeiter",
                "Cookies / Tracking",
                "Widerruf / Opt-out",
                "Beschwerde bei Aufsichtsbehörde",
                "Drittlandtransfer",
                "Datenschutzkontakt / DPO-Hinweis",
                "Verständliche Satzlänge"
            ],
            "score": 93,
            "checks": [
                {
                    "id": "controller_identity",
                    "found": true,
                    "label": "Verantwortlicher / Anbieter"
                },
                {
                    "id": "contact",
                    "found": true,
                    "label": "Kontakt / Datenschutzkontakt"
                },
                {
                    "id": "purposes",
                    "found": true,
                    "label": "Zwecke der Verarbeitung"
                },
                {
                    "id": "legal_basis",
                    "found": true,
                    "label": "Rechtsgrundlagen"
                },
                {
                    "id": "rights",
                    "found": true,
                    "label": "Betroffenenrechte"
                },
                {
                    "id": "retention",
                    "found": true,
                    "label": "Speicherfrist / Löschung"
                },
                {
                    "id": "recipients",
                    "found": true,
                    "label": "Empfänger / Auftragsverarbeiter"
                },
                {
                    "id": "cookies_tracking",
                    "found": true,
                    "label": "Cookies / Tracking"
                },
                {
                    "id": "withdrawal",
                    "found": true,
                    "label": "Widerruf / Opt-out"
                },
                {
                    "id": "complaint_authority",
                    "found": true,
                    "label": "Beschwerde bei Aufsichtsbehörde"
                },
                {
                    "id": "third_country_transfer",
                    "found": true,
                    "label": "Drittlandtransfer"
                },
                {
                    "id": "update_date",
                    "found": false,
                    "label": "Stand / Aktualitätsdatum",
                    "detail": ""
                },
                {
                    "id": "dpo_contact",
                    "found": true,
                    "label": "Datenschutzkontakt / DPO-Hinweis"
                },
                {
                    "id": "readability",
                    "found": true,
                    "label": "Verständliche Satzlänge",
                    "detail": "23.6 Wörter/Satz"
                }
            ],
            "status": "unauffällig",
            "missing": [
                "Stand / Aktualitätsdatum"
            ],
            "summary": "13 von 14 zentralen Datenschutz-Bausteinen erkannt.",
            "findings": [
                {
                    "id": "privacy_policy_update_date_missing",
                    "title": "Stand der Datenschutzerklärung nicht klar erkennbar",
                    "public": true,
                    "category": "privacy",
                    "severity": "info"
                }
            ],
            "available": true,
            "freshness": {
                "stale": false,
                "age_days": null,
                "last_updated": "",
                "update_date_found": false
            },
            "word_count": 6421,
            "readability": {
                "hard_to_read": false,
                "sentence_count": 272,
                "avg_sentence_words": 23.6
            },
            "missing_count": 1,
            "dpo_contact_found": true
        },
        "sitemap_source_count": 3,
        "provider_disclosure_audit": {
            "color": "orange",
            "found": [
                "Google",
                "Google Analytics"
            ],
            "score": 67,
            "checks": [
                {
                    "id": "analytics_google",
                    "found": true,
                    "category": "analytics",
                    "evidence": [
                        "_ga",
                        "_ga_B219F06924",
                        "_ga_GJQR2QFHW9"
                    ],
                    "keywords": [
                        "google",
                        "tracking",
                        "analytics",
                        "werbung"
                    ],
                    "provider": "Google",
                    "category_label": "Analytics"
                },
                {
                    "id": "analytics_google_analytics",
                    "found": true,
                    "category": "analytics",
                    "evidence": [
                        "G-GJQR2QFHW9",
                        "UA-478852-1",
                        "google-analytics.com"
                    ],
                    "keywords": [
                        "google analytics",
                        "analytics.google",
                        "_ga",
                        "ga4",
                        "gtag"
                    ],
                    "provider": "Google Analytics",
                    "category_label": "Tracking-ID"
                },
                {
                    "id": "tag_manager_google_tag_manager",
                    "found": false,
                    "category": "tag_manager",
                    "evidence": [
                        "googletagmanager.com"
                    ],
                    "keywords": [
                        "google tag manager",
                        "tag manager",
                        "googletagmanager",
                        "gtm-"
                    ],
                    "provider": "Google Tag Manager",
                    "category_label": "Tag-Manager"
                }
            ],
            "status": "auffällig",
            "missing": [
                "Google Tag Manager"
            ],
            "summary": "2 von 3 technisch erkannten Anbieter(n) wurden in der Datenschutzerklärung erwähnt.",
            "available": true,
            "missing_count": 1,
            "detected_count": 3,
            "mentioned_count": 2
        },
        "important_categories_found": [
            "cookies",
            "datenschutz",
            "impressum",
            "kontakt"
        ],
        "sampled_tracking_page_count": 0,
        "sampled_form_privacy_gap_count": 0
    },
    "page_analysis": {
        "h1": [
            "<a href=\"https://www.consolar.de/de/2026/03/adolf-goetzberger-preis-2026-an-dr-ulrich-leibfried/\" data-et-multi-view=\"{\"schema\":{\"content\":{\"desktop\":\"Adolf G\\u00f6tzberger-Preis an Dr. Ulrich Leibfried\",\"tablet\":\"Consolar\"}},\"slug\":\"et_pb_slide\"}\" data-et-multi-view-load-tablet-hidden=\"true\">Adolf Götzberger-Preis an Dr. Ulrich Leibfried</a>",
            "<a href=\"https://www.consolar.de/de/2025/12/mehr-leistung-neue-modulmasse-bei-solink/\" data-et-multi-view=\"{\"schema\":{\"content\":{\"desktop\":\"Ab 2026: Neue Modulma\\u00dfe\",\"tablet\":\"Consolar\"}},\"slug\":\"et_pb_slide\"}\" data-et-multi-view-load-tablet-hidden=\"true\">Ab 2026: Neue Modulmaße</a>",
            "<a href=\"https://www.consolar.de/de/2025/09/neue-kollektor-klasse-mehr-leistung-weniger-flaeche/\" data-et-multi-view=\"{\"schema\":{\"content\":{\"desktop\":\"Doppelt Gut!\",\"tablet\":\"Consolar\"}},\"slug\":\"et_pb_slide\"}\" data-et-multi-view-load-tablet-hidden=\"true\">Doppelt Gut!</a>",
            "<a href=\"https://www.consolar.de/de/2025/11/mit-solink-und-waermepumpe-zum-energiegewinner-marcos-pvt-erfolgsgeschichte/\" data-et-multi-view=\"{\"schema\":{\"content\":{\"desktop\":\"PVT im Eigenheim\",\"tablet\":\"Consolar\"}},\"slug\":\"et_pb_slide\"}\" data-et-multi-view-load-tablet-hidden=\"true\">PVT im Eigenheim</a>",
            "<a href=\"https://www.consolar.de/de/2024/12/naechste-generation-solartechnik-rollt-in-hessen-vom-band/\" data-et-multi-view=\"{\"schema\":{\"content\":{\"desktop\":\"Made in Germany\",\"tablet\":\"Consolar\"}},\"slug\":\"et_pb_slide\"}\" data-et-multi-view-load-tablet-hidden=\"true\">Made in Germany</a>"
        ],
        "h2": [
            "Webinare und Schulungen",
            "Fragen und Antworten zu SOLINK",
            "Unsere Produkte",
            "Solarenergie PLANEN",
            "ÜBER CONSOLAR",
            "COnsolar Referenzen",
            "<a href=\"https://www.consolar.de/de/referenzen/\">Nürtingen</a>",
            "<a href=\"https://www.consolar.de/de/referenzen/\">Rathaus Offenbach</a>",
            "Consolar kontaktieren"
        ],
        "title": "Home - Consolar Solare Energiesysteme GmbH",
        "keywords": [
            [
                "erfahren",
                14
            ],
            [
                "solink",
                13
            ],
            [
                "consolar",
                11
            ],
            [
                "fragen",
                5
            ],
            [
                "wärmepumpe",
                5
            ],
            [
                "antworten",
                4
            ],
            [
                "sind",
                4
            ],
            [
                "pvt-fläche",
                4
            ],
            [
                "gebäude",
                4
            ],
            [
                "solare",
                3
            ]
        ],
        "language": "de-de",
        "description": "",
        "favicon_url": "https://www.consolar.de/wp-content/uploads/2024/09/cropped-Logo-CS-180x180.png",
        "link_counts": {
            "external": 14,
            "internal": 70
        },
        "preview_image": "/cache/screenshots/consolar.de-160x150-e5a33d8c84c7f928b6.png",
        "screenshot_url": "/cache/screenshots/consolar.de-160x150-e5a33d8c84c7f928b6.png",
        "external_scripts": [],
        "browser_final_url": "https://www.consolar.de/de/home/",
        "meta_preview_image": "https://www.consolar.de/wp-content/uploads/2025/11/2025_11_11_SOLINK-PVT-Luft-Sole-Kollektor-vs.-Standard-PVT-Kollektor-flach-visual-selection.png",
        "screenshot_renderer": "playwright-chromium",
        "external_link_targets": [
            {
                "host": "youtu.be",
                "count": 2,
                "examples": [
                    {
                        "href": "https://youtu.be/KNHAgmyz6bE?si=n5xaWrXZe7CQEVGy",
                        "text": "Der Energiewende Report"
                    },
                    {
                        "href": "https://youtu.be/KNHAgmyz6bE?si=n5xaWrXZe7CQEVGy",
                        "text": "Jetzt ansehen"
                    }
                ],
                "nofollow": 0,
                "strength": "strong",
                "follow_count": 2
            },
            {
                "host": "de.linkedin.com",
                "count": 1,
                "examples": [
                    {
                        "href": "https://de.linkedin.com/company/consolar-solare-energiesysteme-gmbh?trk=similar-pages_result-card_full-click",
                        "text": "LinkedIn"
                    }
                ],
                "nofollow": 0,
                "strength": "strong",
                "follow_count": 1
            },
            {
                "host": "forms.cloud.microsoft",
                "count": 1,
                "examples": [
                    {
                        "href": "https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=d67jsSFHfECZgWmAS1d35P1rwPOlT2ZFh08e6Jc2GqRUQTFWMFVVRk5MS0dIVVVHSkdaUjBSNklHTi4u",
                        "text": "Anmeldung Praxisschulung"
                    }
                ],
                "nofollow": 0,
                "strength": "strong",
                "follow_count": 1
            },
            {
                "host": "wpdownloadmanager.com",
                "count": 1,
                "examples": [
                    {
                        "href": "https://www.wpdownloadmanager.com/",
                        "text": "WordPress Download Manager - Best Download Management Plugin"
                    }
                ],
                "nofollow": 0,
                "strength": "strong",
                "follow_count": 1
            },
            {
                "host": "policies.google.com",
                "count": 4,
                "examples": [
                    {
                        "href": "https://policies.google.com/privacy?hl=de",
                        "text": "https://policies.google.com/privacy?hl=de"
                    },
                    {
                        "href": "https://policies.google.com/privacy?hl=de",
                        "text": "https://policies.google.com/privacy?hl=de"
                    },
                    {
                        "href": "https://policies.google.com/privacy",
                        "text": "https://policies.google.com/privacy"
                    }
                ],
                "nofollow": 4,
                "strength": "weak",
                "follow_count": 0
            },
            {
                "host": "de.borlabs.io",
                "count": 1,
                "examples": [
                    {
                        "href": "https://de.borlabs.io/borlabs-cookie/",
                        "text": "powered by Borlabs Cookie"
                    }
                ],
                "nofollow": 1,
                "strength": "weak",
                "follow_count": 0
            },
            {
                "host": "facebook.com",
                "count": 1,
                "examples": [
                    {
                        "href": "https://www.facebook.com/privacy/explanation",
                        "text": "https://www.facebook.com/privacy/explanation"
                    }
                ],
                "nofollow": 1,
                "strength": "weak",
                "follow_count": 0
            },
            {
                "host": "instagram.com",
                "count": 1,
                "examples": [
                    {
                        "href": "https://www.instagram.com/legal/privacy/",
                        "text": "https://www.instagram.com/legal/privacy/"
                    }
                ],
                "nofollow": 1,
                "strength": "weak",
                "follow_count": 0
            },
            {
                "host": "twitter.com",
                "count": 1,
                "examples": [
                    {
                        "href": "https://twitter.com/privacy",
                        "text": "https://twitter.com/privacy"
                    }
                ],
                "nofollow": 1,
                "strength": "weak",
                "follow_count": 0
            },
            {
                "host": "vimeo.com",
                "count": 1,
                "examples": [
                    {
                        "href": "https://vimeo.com/privacy",
                        "text": "https://vimeo.com/privacy"
                    }
                ],
                "nofollow": 1,
                "strength": "weak",
                "follow_count": 0
            }
        ]
    },
    "browser_analysis": {
        "cookies": {
            "items": [
                {
                    "name": "pll_language",
                    "domain": "www.consolar.de",
                    "secure": true,
                    "expires": 1812578372,
                    "http_only": false,
                    "same_site": "Lax"
                },
                {
                    "name": "borlabs-cookie",
                    "domain": ".www.consolar.de",
                    "secure": true,
                    "expires": 1812578372,
                    "http_only": false,
                    "same_site": "Lax"
                },
                {
                    "name": "_gid",
                    "domain": ".consolar.de",
                    "secure": false,
                    "expires": 1781128772,
                    "http_only": false,
                    "same_site": "Lax"
                },
                {
                    "name": "_gat",
                    "domain": ".consolar.de",
                    "secure": false,
                    "expires": 1781042432,
                    "http_only": false,
                    "same_site": "Lax"
                },
                {
                    "name": "_ga_GJQR2QFHW9",
                    "domain": ".consolar.de",
                    "secure": false,
                    "expires": 1815602372.414589,
                    "http_only": false,
                    "same_site": "Lax"
                },
                {
                    "name": "_ga",
                    "domain": ".consolar.de",
                    "secure": false,
                    "expires": 1815602372.414904,
                    "http_only": false,
                    "same_site": "Lax"
                },
                {
                    "name": "_ga_B219F06924",
                    "domain": ".consolar.de",
                    "secure": false,
                    "expires": 1815602372.537688,
                    "http_only": false,
                    "same_site": "Lax"
                }
            ],
            "total": 7,
            "third_party": 0
        },
        "storage": {
            "total": 0,
            "local_storage_keys": [],
            "tracking_key_hints": [],
            "local_storage_total": 0,
            "session_storage_keys": [],
            "session_storage_total": 0
        },
        "findings": [
            {
                "id": "browser_privacy_relevant_third_parties",
                "title": "Datenschutzrelevante Drittanbieter im Browseraufruf",
                "public": true,
                "category": "privacy",
                "severity": "warning"
            },
            {
                "id": "gpc_privacy_domains_present",
                "count": 3,
                "title": "Datenschutzrelevante Kontakte trotz GPC-Signal",
                "public": true,
                "category": "privacy",
                "severity": "info"
            },
            {
                "id": "cmp_api_not_detected",
                "title": "Keine gängige CMP-/TCF-API im Browser erkannt",
                "public": true,
                "category": "privacy",
                "severity": "info"
            },
            {
                "id": "third_country_transfer_review",
                "title": "Drittland-/US-Anbieter im Browseraufruf prüfen",
                "public": true,
                "category": "privacy",
                "severity": "warning"
            },
            {
                "id": "third_party_page_url_parameter",
                "count": 3,
                "title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
                "public": true,
                "category": "privacy",
                "severity": "warning"
            },
            {
                "id": "third_party_sensitive_query_leak",
                "count": 2,
                "title": "Sensible URL-Schlüssel im Drittanbieter-Kontext",
                "public": true,
                "category": "privacy",
                "severity": "warning"
            },
            {
                "id": "consent_state_gpc_evidence_review",
                "title": "Consent-Zustand: GPC mit Tracking-Hinweisen",
                "public": true,
                "category": "privacy",
                "severity": "info"
            },
            {
                "id": "beacon_api_usage",
                "count": 5,
                "title": "Beacon-/Keepalive-Telemetrie erkannt",
                "public": true,
                "category": "privacy",
                "severity": "warning"
            }
        ],
        "renderer": "playwright-chromium",
        "final_url": "https://www.consolar.de/de/home/",
        "consent_ui": {
            "accept_controls": [],
            "accept_max_area": 0,
            "reject_controls": [],
            "reject_max_area": 0,
            "settings_controls": [],
            "first_layer_summary": "Akzeptieren 0 / Ablehnen 0 / Einstellungen 0",
            "cookie_context_found": true,
            "reject_less_prominent": false,
            "visible_control_count": 12,
            "reject_prominence_ratio": 0
        },
        "gpc_signal": {
            "error": "",
            "enabled": true,
            "storage": {
                "total": 0,
                "tracking_key_hints": [],
                "local_storage_total": 0,
                "session_storage_total": 0
            },
            "cookie_count": 7,
            "request_count": 52,
            "sec_gpc_header": true,
            "navigator_value": true,
            "contacted_domains": [
                {
                    "host": "consolar.de",
                    "count": 46,
                    "category": "other",
                    "provider": "consolar.de",
                    "third_party": false,
                    "category_label": "Sonstige",
                    "resource_types": {
                        "font": 4,
                        "image": 20,
                        "script": 18,
                        "document": 1,
                        "stylesheet": 3
                    }
                },
                {
                    "host": "google-analytics.com",
                    "count": 2,
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "third_party": true,
                    "category_label": "Analytics",
                    "resource_types": {
                        "xhr": 1,
                        "script": 1
                    }
                },
                {
                    "host": "googletagmanager.com",
                    "count": 2,
                    "category": "tag_manager",
                    "provider": "Google Tag Manager",
                    "third_party": true,
                    "category_label": "Tag-Manager",
                    "resource_types": {
                        "script": 2
                    }
                },
                {
                    "host": "region1.google-analytics.com",
                    "count": 2,
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "third_party": true,
                    "category_label": "Analytics",
                    "resource_types": {
                        "fetch": 2
                    }
                }
            ],
            "contacted_domain_count": 4,
            "privacy_relevant_domains": [
                {
                    "host": "google-analytics.com",
                    "count": 2,
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "third_party": true,
                    "category_label": "Analytics",
                    "resource_types": {
                        "xhr": 1,
                        "script": 1
                    }
                },
                {
                    "host": "googletagmanager.com",
                    "count": 2,
                    "category": "tag_manager",
                    "provider": "Google Tag Manager",
                    "third_party": true,
                    "category_label": "Tag-Manager",
                    "resource_types": {
                        "script": 2
                    }
                },
                {
                    "host": "region1.google-analytics.com",
                    "count": 2,
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "third_party": true,
                    "category_label": "Analytics",
                    "resource_types": {
                        "fetch": 2
                    }
                }
            ],
            "third_party_cookie_count": 0,
            "third_party_domain_count": 3,
            "privacy_relevant_domain_count": 3
        },
        "screenshot": {
            "fit": "contain",
            "width": 160,
            "height": 150,
            "source_width": 1024,
            "source_height": 960,
            "source_capture": "full_page",
            "capture_version": "contain-v3-fullpage-to-160x150"
        },
        "consent_apis": {
            "cmpapi": false,
            "tcfapi": false,
            "onetrust": false,
            "cookiebot": false,
            "data_layer": true,
            "cmp_detected": false,
            "usercentrics": false,
            "google_tag_data": true
        },
        "accept_signal": {
            "error": "",
            "enabled": false,
            "storage": {
                "total": 0,
                "tracking_key_hints": [],
                "local_storage_total": 0,
                "session_storage_total": 0
            },
            "clicked_text": "",
            "accept_clicked": false,
            "accept_available": false,
            "contacted_domains": [],
            "contacted_domain_count": 0,
            "new_domains_after_accept": [],
            "privacy_relevant_domains": [],
            "third_party_domain_count": 0,
            "cookie_count_after_accept": 0,
            "cookie_count_before_accept": 0,
            "request_count_after_accept": 0,
            "storage_count_after_accept": 0,
            "request_count_before_accept": 0,
            "new_cookie_count_after_accept": 0,
            "privacy_relevant_domain_count": 0,
            "new_request_count_after_accept": 0,
            "third_party_cookie_count_after_accept": 0,
            "storage_tracking_hint_count_after_accept": 0,
            "new_privacy_relevant_domains_after_accept": [],
            "new_privacy_relevant_domain_count_after_accept": 0
        },
        "request_count": 52,
        "top_providers": [
            {
                "provider": "Google Analytics",
                "request_count": 4
            },
            {
                "provider": "Google Tag Manager",
                "request_count": 2
            }
        ],
        "request_samples": [
            {
                "host": "google-analytics.com",
                "method": "GET",
                "referrer": {
                    "host": "consolar.de",
                    "has_path": false,
                    "has_query": false,
                    "same_site": true,
                    "path_depth": 0,
                    "query_keys": [],
                    "sensitive_query_key_count": 0
                },
                "has_query": false,
                "path_depth": 1,
                "query_keys": [],
                "third_party": true,
                "resource_type": "script",
                "query_key_count": 0,
                "url_value_param_count": 0,
                "sensitive_query_key_count": 0,
                "target_url_value_param_count": 0
            },
            {
                "host": "googletagmanager.com",
                "method": "GET",
                "referrer": {
                    "host": "consolar.de",
                    "has_path": false,
                    "has_query": false,
                    "same_site": true,
                    "path_depth": 0,
                    "query_keys": [],
                    "sensitive_query_key_count": 0
                },
                "has_query": true,
                "path_depth": 2,
                "query_keys": [
                    "id"
                ],
                "third_party": true,
                "resource_type": "script",
                "query_key_count": 1,
                "url_value_param_count": 0,
                "sensitive_query_key_count": 0,
                "target_url_value_param_count": 0
            },
            {
                "host": "google-analytics.com",
                "method": "POST",
                "referrer": {
                    "host": "consolar.de",
                    "has_path": false,
                    "has_query": false,
                    "same_site": true,
                    "path_depth": 0,
                    "query_keys": [],
                    "sensitive_query_key_count": 0
                },
                "has_query": true,
                "path_depth": 2,
                "query_keys": [
                    "v",
                    "_v",
                    "aip",
                    "a",
                    "t",
                    "_s",
                    "dl",
                    "ul",
                    "dt",
                    "sr",
                    "vp",
                    "_u"
                ],
                "third_party": true,
                "resource_type": "xhr",
                "query_key_count": 20,
                "url_value_param_count": 1,
                "sensitive_query_key_count": 0,
                "target_url_value_param_count": 1
            },
            {
                "host": "googletagmanager.com",
                "method": "GET",
                "referrer": {
                    "host": "consolar.de",
                    "has_path": false,
                    "has_query": false,
                    "same_site": true,
                    "path_depth": 0,
                    "query_keys": [],
                    "sensitive_query_key_count": 0
                },
                "has_query": true,
                "path_depth": 2,
                "query_keys": [
                    "id",
                    "cx",
                    "_slc"
                ],
                "third_party": true,
                "resource_type": "script",
                "query_key_count": 3,
                "url_value_param_count": 0,
                "sensitive_query_key_count": 0,
                "target_url_value_param_count": 0
            },
            {
                "host": "region1.google-analytics.com",
                "method": "POST",
                "referrer": {
                    "host": "consolar.de",
                    "has_path": false,
                    "has_query": false,
                    "same_site": true,
                    "path_depth": 0,
                    "query_keys": [],
                    "sensitive_query_key_count": 0
                },
                "has_query": true,
                "path_depth": 2,
                "query_keys": [
                    "v",
                    "tid",
                    "gtm",
                    "_p",
                    "gcd",
                    "npa",
                    "dma_cps",
                    "dma",
                    "are",
                    "cid",
                    "frm",
                    "pscdl"
                ],
                "third_party": true,
                "resource_type": "fetch",
                "query_key_count": 37,
                "url_value_param_count": 1,
                "sensitive_query_key_count": 1,
                "target_url_value_param_count": 1
            },
            {
                "host": "region1.google-analytics.com",
                "method": "POST",
                "referrer": {
                    "host": "consolar.de",
                    "has_path": false,
                    "has_query": false,
                    "same_site": true,
                    "path_depth": 0,
                    "query_keys": [],
                    "sensitive_query_key_count": 0
                },
                "has_query": true,
                "path_depth": 2,
                "query_keys": [
                    "v",
                    "tid",
                    "gtm",
                    "_p",
                    "gcd",
                    "npa",
                    "dma_cps",
                    "dma",
                    "_eu",
                    "are",
                    "cid",
                    "frm"
                ],
                "third_party": true,
                "resource_type": "fetch",
                "query_key_count": 37,
                "url_value_param_count": 1,
                "sensitive_query_key_count": 1,
                "target_url_value_param_count": 1
            }
        ],
        "cmp_consent_state": {
            "tcf": {
                "api_found": false,
                "vendor_li": [],
                "cmp_loaded": false,
                "cmp_status": "",
                "purpose_li": [],
                "event_status": "",
                "gdpr_applies": null,
                "ping_success": false,
                "policy_version": "",
                "vendor_consents": [],
                "vendor_li_count": 0,
                "purpose_consents": [],
                "purpose_li_count": 0,
                "tc_string_length": 0,
                "tc_string_present": false,
                "vendor_consent_count": 0,
                "purpose_consent_count": 0
            },
            "onetrust": {
                "found": false,
                "active_groups": [],
                "active_group_count": 0
            },
            "cookiebot": {
                "found": false,
                "declined": false,
                "consented": false,
                "has_response": false,
                "consent_marketing": null,
                "consent_statistics": null,
                "consent_preferences": null
            },
            "usercentrics": {
                "found": false,
                "has_response": false,
                "services_count": 0,
                "accepted_services_count": 0
            }
        },
        "contacted_domains": [
            {
                "host": "consolar.de",
                "count": 46,
                "category": "other",
                "provider": "consolar.de",
                "third_party": false,
                "category_label": "Sonstige",
                "resource_types": {
                    "font": 4,
                    "image": 20,
                    "script": 18,
                    "document": 1,
                    "stylesheet": 3
                }
            },
            {
                "host": "google-analytics.com",
                "count": 2,
                "category": "analytics",
                "provider": "Google Analytics",
                "third_party": true,
                "category_label": "Analytics",
                "resource_types": {
                    "xhr": 1,
                    "script": 1
                }
            },
            {
                "host": "googletagmanager.com",
                "count": 2,
                "category": "tag_manager",
                "provider": "Google Tag Manager",
                "third_party": true,
                "category_label": "Tag-Manager",
                "resource_types": {
                    "script": 2
                }
            },
            {
                "host": "region1.google-analytics.com",
                "count": 2,
                "category": "analytics",
                "provider": "Google Analytics",
                "third_party": true,
                "category_label": "Analytics",
                "resource_types": {
                    "fetch": 2
                }
            }
        ],
        "privacy_api_metrics": {
            "api_calls": {
                "fetch_keepalive_count": 2,
                "mutation_observer_count": 2,
                "keyboard_input_listener_count": 3
            },
            "beacon_count": 0,
            "webgl_read_count": 0,
            "canvas_read_count": 0,
            "audio_context_count": 0,
            "canvas_export_count": 0,
            "fetch_keepalive_count": 2,
            "webgl_parameter_count": 0,
            "mutation_observer_count": 2,
            "keyboard_input_listener_count": 3
        },
        "tcf_consent_analysis": {
            "color": "green",
            "score": 100,
            "status": "unauffällig",
            "summary": "TCF-Decoder: 0 Zweck(e) mit Consent/LI-Signal, 0 Vendor-Consent(s), 0 Vendor-LI-Signal(e).",
            "findings": [],
            "api_found": false,
            "available": false,
            "cmp_loaded": false,
            "cmp_status": "",
            "event_status": "",
            "gdpr_applies": null,
            "ping_success": false,
            "purpose_rows": [
                {
                    "id": 1,
                    "label": "Informationen auf einem Gerät speichern und/oder abrufen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 2,
                    "label": "Einfache Anzeigen auswählen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 3,
                    "label": "Personalisiertes Anzeigen-Profil erstellen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 4,
                    "label": "Personalisierte Anzeigen auswählen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 5,
                    "label": "Personalisiertes Inhalts-Profil erstellen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 6,
                    "label": "Personalisierte Inhalte auswählen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 7,
                    "label": "Anzeigen-Leistung messen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 8,
                    "label": "Inhalte-Leistung messen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 9,
                    "label": "Marktforschung zur Generierung von Erkenntnissen nutzen",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 10,
                    "label": "Produkte entwickeln und verbessern",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                },
                {
                    "id": 11,
                    "label": "Begrenzte Daten zur Anzeigen-Auswahl verwenden",
                    "status": "nicht_erlaubt",
                    "risk_level": "niedrig",
                    "consent_granted": false,
                    "legitimate_interest_granted": false
                }
            ],
            "vendor_li_ids": [],
            "policy_version": "",
            "vendor_li_count": 0,
            "purpose_li_count": 0,
            "tc_string_length": 0,
            "tc_string_present": false,
            "vendor_consent_ids": [],
            "granted_purpose_rows": [],
            "vendor_consent_count": 0,
            "purpose_consent_count": 0,
            "high_risk_purpose_count": 0,
            "medium_risk_purpose_count": 0
        },
        "consent_journey_matrix": {
            "color": "yellow",
            "items": [
                {
                    "host": "google-analytics.com",
                    "states": {
                        "gpc": 2,
                        "default": 2
                    },
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "category_label": "Analytics",
                    "privacy_relevant": true,
                    "total_request_count": 4
                },
                {
                    "host": "region1.google-analytics.com",
                    "states": {
                        "gpc": 2,
                        "default": 2
                    },
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "category_label": "Analytics",
                    "privacy_relevant": true,
                    "total_request_count": 4
                },
                {
                    "host": "googletagmanager.com",
                    "states": {
                        "gpc": 2,
                        "default": 2
                    },
                    "category": "tag_manager",
                    "provider": "Google Tag Manager",
                    "category_label": "Tag-Manager",
                    "privacy_relevant": true,
                    "total_request_count": 4
                }
            ],
            "score": 76,
            "states": [
                {
                    "id": "default",
                    "label": "Erstaufruf",
                    "description": "Kontakte ohne Nutzeraktion",
                    "domain_count": 3,
                    "request_count": 6,
                    "privacy_relevant_domain_count": 3
                },
                {
                    "id": "reject_new",
                    "label": "Nach Ablehnen neu",
                    "description": "Neue Kontakte nach Ablehnen-Klick",
                    "domain_count": 0,
                    "request_count": 0,
                    "privacy_relevant_domain_count": 0
                },
                {
                    "id": "accept_new",
                    "label": "Nach Akzeptieren neu",
                    "description": "Neue Kontakte nach Akzeptieren-Klick",
                    "domain_count": 0,
                    "request_count": 0,
                    "privacy_relevant_domain_count": 0
                },
                {
                    "id": "gpc",
                    "label": "GPC-Aufruf",
                    "description": "Kontakte bei Global Privacy Control",
                    "domain_count": 3,
                    "request_count": 6,
                    "privacy_relevant_domain_count": 3
                }
            ],
            "status": "prüfen",
            "summary": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 3 im GPC-Aufruf.",
            "gpc_privacy_relevant_domain_count": 3,
            "accept_privacy_relevant_domain_count": 0,
            "reject_privacy_relevant_domain_count": 0
        },
        "consent_state_evidence": {
            "rows": [
                {
                    "id": "default",
                    "label": "Erstaufruf",
                    "status": "ohne Nutzeraktion",
                    "evidence": "Baseline aus erstem Chromium-Aufruf ohne Banner-Interaktion.",
                    "risk_level": "mittel",
                    "cookie_count": 7,
                    "domain_count": 4,
                    "request_count": 52,
                    "storage_total": 0,
                    "new_cookie_count": 7,
                    "third_party_cookie_count": 0,
                    "storage_tracking_hint_count": 0,
                    "privacy_relevant_domain_count": 3
                },
                {
                    "id": "reject",
                    "label": "Nach Ablehnen",
                    "status": "nicht verfügbar",
                    "evidence": "",
                    "risk_level": "niedrig",
                    "cookie_count": 7,
                    "domain_count": 0,
                    "request_count": 0,
                    "storage_total": 0,
                    "new_cookie_count": 0,
                    "third_party_cookie_count": 0,
                    "storage_tracking_hint_count": 0,
                    "privacy_relevant_domain_count": 0
                },
                {
                    "id": "accept",
                    "label": "Nach Akzeptieren",
                    "status": "nicht ausgeführt",
                    "evidence": "",
                    "risk_level": "niedrig",
                    "cookie_count": 0,
                    "domain_count": 0,
                    "request_count": 0,
                    "storage_total": 0,
                    "new_cookie_count": 0,
                    "third_party_cookie_count": 0,
                    "storage_tracking_hint_count": 0,
                    "privacy_relevant_domain_count": 0
                },
                {
                    "id": "gpc",
                    "label": "GPC-Aufruf",
                    "status": "aktiv",
                    "evidence": "Navigator-GPC und Sec-GPC wurden im gesonderten Browserlauf gesetzt.",
                    "risk_level": "mittel",
                    "cookie_count": 7,
                    "domain_count": 4,
                    "request_count": 52,
                    "storage_total": 0,
                    "new_cookie_count": 0,
                    "third_party_cookie_count": 0,
                    "storage_tracking_hint_count": 0,
                    "privacy_relevant_domain_count": 3
                }
            ],
            "color": "yellow",
            "score": 80,
            "status": "prüfen",
            "summary": "Consent-State-Evidence: 4 Zustände verglichen, 0 hoch auffällig, 2 mittel auffällig.",
            "findings": [
                {
                    "id": "consent_state_gpc_evidence_review",
                    "title": "Consent-Zustand: GPC mit Tracking-Hinweisen",
                    "public": true,
                    "category": "privacy",
                    "severity": "info"
                }
            ],
            "available": true,
            "high_count": 0,
            "medium_count": 2
        },
        "contacted_domain_count": 4,
        "fingerprinting_analysis": {
            "color": "green",
            "score": 100,
            "checks": [
                {
                    "id": "canvas",
                    "ok": true,
                    "count": 0,
                    "label": "Canvas-Auslese",
                    "detail": "0 Pixel-Lesezugriff(e), 0 Export(e)."
                },
                {
                    "id": "webgl",
                    "ok": true,
                    "count": 0,
                    "label": "WebGL-Merkmale",
                    "detail": "0 Parameterzugriff(e), 0 Pixel-Lesezugriff(e)."
                },
                {
                    "id": "audio",
                    "ok": true,
                    "count": 0,
                    "label": "AudioContext",
                    "detail": "0 AudioContext/OfflineAudioContext-Aufruf(e)."
                },
                {
                    "id": "session_replay",
                    "ok": true,
                    "count": 0,
                    "label": "Session-Replay-Anbieter",
                    "detail": "Keine bekannten Anbieter erkannt."
                },
                {
                    "id": "input_listeners",
                    "ok": true,
                    "count": 3,
                    "label": "Tastatur-/Eingabe-Listener",
                    "detail": "3 Tastatur-/Input-Listener, 157 Interaktions-Listener, 2 MutationObserver."
                }
            ],
            "status": "unauffällig",
            "metrics": {
                "webgl_read_count": 0,
                "canvas_read_count": 0,
                "audio_context_count": 0,
                "canvas_export_count": 0,
                "webgl_parameter_count": 0,
                "mutation_observer_count": 2,
                "keyboard_input_listener_count": 3
            },
            "summary": "0 Fingerprinting-/Session-Replay-Hinweis(e) aus dem Browserlauf.",
            "findings": [],
            "finding_count": 0,
            "session_replay_domains": []
        },
        "privacy_relevant_domains": [
            {
                "host": "google-analytics.com",
                "count": 2,
                "category": "analytics",
                "provider": "Google Analytics",
                "third_party": true,
                "category_label": "Analytics",
                "resource_types": {
                    "xhr": 1,
                    "script": 1
                }
            },
            {
                "host": "googletagmanager.com",
                "count": 2,
                "category": "tag_manager",
                "provider": "Google Tag Manager",
                "third_party": true,
                "category_label": "Tag-Manager",
                "resource_types": {
                    "script": 2
                }
            },
            {
                "host": "region1.google-analytics.com",
                "count": 2,
                "category": "analytics",
                "provider": "Google Analytics",
                "third_party": true,
                "category_label": "Analytics",
                "resource_types": {
                    "fetch": 2
                }
            }
        ],
        "provider_category_counts": {
            "analytics": 2,
            "tag_manager": 1
        },
        "provider_category_labels": {
            "analytics": "Analytics",
            "tag_manager": "Tag-Manager"
        },
        "third_party_domain_count": 3,
        "embedded_content_analysis": {
            "color": "green",
            "items": [],
            "score": 100,
            "status": "unauffällig",
            "summary": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen.",
            "findings": [],
            "map_count": 0,
            "total_count": 0,
            "video_count": 0,
            "captcha_count": 0,
            "category_counts": [],
            "social_widget_count": 0,
            "loaded_pre_consent_count": 0,
            "request_count_by_provider": []
        },
        "referrer_leakage_analysis": {
            "color": "red",
            "items": [
                {
                    "host": "region1.google-analytics.com",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "tid",
                        "gtm",
                        "_p",
                        "gcd",
                        "npa",
                        "dma_cps",
                        "dma"
                    ],
                    "risk_reason": "sensibler Query-Schlüssel im Drittanbieter-Request oder Referrer",
                    "resource_type": "fetch",
                    "category_label": "Analytics",
                    "referrer_query_keys": [],
                    "sensitive_query_key_count": 1,
                    "referrer_sensitive_query_key_count": 0
                },
                {
                    "host": "region1.google-analytics.com",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "tid",
                        "gtm",
                        "_p",
                        "gcd",
                        "npa",
                        "dma_cps",
                        "dma"
                    ],
                    "risk_reason": "sensibler Query-Schlüssel im Drittanbieter-Request oder Referrer",
                    "resource_type": "fetch",
                    "category_label": "Analytics",
                    "referrer_query_keys": [],
                    "sensitive_query_key_count": 1,
                    "referrer_sensitive_query_key_count": 0
                },
                {
                    "host": "google-analytics.com",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "_v",
                        "aip",
                        "a",
                        "t",
                        "_s",
                        "dl",
                        "ul"
                    ],
                    "risk_reason": "Seiten-URL oder URL-Wert in Drittanbieter-Requestparametern",
                    "resource_type": "xhr",
                    "category_label": "Analytics",
                    "referrer_query_keys": [],
                    "url_value_param_count": 1,
                    "target_url_value_param_count": 1
                },
                {
                    "host": "region1.google-analytics.com",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "tid",
                        "gtm",
                        "_p",
                        "gcd",
                        "npa",
                        "dma_cps",
                        "dma"
                    ],
                    "risk_reason": "Seiten-URL oder URL-Wert in Drittanbieter-Requestparametern",
                    "resource_type": "fetch",
                    "category_label": "Analytics",
                    "referrer_query_keys": [],
                    "url_value_param_count": 1,
                    "target_url_value_param_count": 1
                },
                {
                    "host": "region1.google-analytics.com",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "tid",
                        "gtm",
                        "_p",
                        "gcd",
                        "npa",
                        "dma_cps",
                        "dma"
                    ],
                    "risk_reason": "Seiten-URL oder URL-Wert in Drittanbieter-Requestparametern",
                    "resource_type": "fetch",
                    "category_label": "Analytics",
                    "referrer_query_keys": [],
                    "url_value_param_count": 1,
                    "target_url_value_param_count": 1
                }
            ],
            "score": 25,
            "status": "kritisch",
            "summary": "2 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 2 sensible Query-Kontexte.",
            "findings": [
                {
                    "id": "third_party_page_url_parameter",
                    "count": 3,
                    "title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
                    "public": true,
                    "category": "privacy",
                    "severity": "warning"
                },
                {
                    "id": "third_party_sensitive_query_leak",
                    "count": 2,
                    "title": "Sensible URL-Schlüssel im Drittanbieter-Kontext",
                    "public": true,
                    "category": "privacy",
                    "severity": "warning"
                }
            ],
            "sample_count": 6,
            "full_referrer_count": 0,
            "page_url_param_count": 3,
            "affected_domain_count": 2,
            "sensitive_query_count": 2
        },
        "third_party_contact_matrix": {
            "color": "orange",
            "items": [
                {
                    "host": "google-analytics.com",
                    "region": "US",
                    "status": "vor Einwilligung prüfen",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "risk_level": "hoch",
                    "request_count": 2,
                    "transfer_risk": "hoch",
                    "category_label": "Analytics",
                    "resource_types": [
                        {
                            "type": "script",
                            "count": 1
                        },
                        {
                            "type": "xhr",
                            "count": 1
                        }
                    ],
                    "transfer_label": "Drittland/USA",
                    "privacy_relevant": true
                },
                {
                    "host": "region1.google-analytics.com",
                    "region": "US",
                    "status": "vor Einwilligung prüfen",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "risk_level": "hoch",
                    "request_count": 2,
                    "transfer_risk": "hoch",
                    "category_label": "Analytics",
                    "resource_types": [
                        {
                            "type": "fetch",
                            "count": 2
                        }
                    ],
                    "transfer_label": "Drittland/USA",
                    "privacy_relevant": true
                },
                {
                    "host": "googletagmanager.com",
                    "region": "US",
                    "status": "vor Einwilligung prüfen",
                    "category": "tag_manager",
                    "provider": "Google Tag Manager",
                    "risk_level": "hoch",
                    "request_count": 2,
                    "transfer_risk": "hoch",
                    "category_label": "Tag-Manager",
                    "resource_types": [
                        {
                            "type": "script",
                            "count": 2
                        }
                    ],
                    "transfer_label": "Drittland/USA",
                    "privacy_relevant": true
                }
            ],
            "score": 50,
            "status": "auffällig",
            "summary": "3 Drittanbieter-Domain(s) beim ersten Browseraufruf, davon 3 datenschutzrelevant.",
            "category_counts": {
                "Analytics": 2,
                "Tag-Manager": 1
            },
            "total_domain_count": 3,
            "total_request_count": 6,
            "privacy_relevant_count": 3,
            "transfer_risk_analysis": {
                "color": "orange",
                "items": [
                    {
                        "host": "google-analytics.com",
                        "region": "US",
                        "provider": "Google Analytics",
                        "request_count": 2,
                        "transfer_risk": "hoch",
                        "category_label": "Analytics",
                        "transfer_label": "Drittland/USA",
                        "privacy_relevant": true
                    },
                    {
                        "host": "region1.google-analytics.com",
                        "region": "US",
                        "provider": "Google Analytics",
                        "request_count": 2,
                        "transfer_risk": "hoch",
                        "category_label": "Analytics",
                        "transfer_label": "Drittland/USA",
                        "privacy_relevant": true
                    },
                    {
                        "host": "googletagmanager.com",
                        "region": "US",
                        "provider": "Google Tag Manager",
                        "request_count": 2,
                        "transfer_risk": "hoch",
                        "category_label": "Tag-Manager",
                        "transfer_label": "Drittland/USA",
                        "privacy_relevant": true
                    }
                ],
                "score": 55,
                "status": "auffällig",
                "summary": "3 Drittanbieter für Transfer-/Jurisdiktionsprüfung, 3 mit hohem Prüfbedarf, 0 unklar.",
                "findings": [
                    {
                        "id": "third_country_transfer_review",
                        "title": "Drittland-/US-Anbieter im Browseraufruf prüfen",
                        "public": true,
                        "category": "privacy",
                        "severity": "warning"
                    }
                ],
                "unknown_count": 0,
                "high_risk_count": 3,
                "total_vendor_count": 3,
                "third_country_count": 3
            }
        },
        "privacy_relevant_domain_count": 3,
        "tracking_pixel_beacon_analysis": {
            "color": "orange",
            "items": [
                {
                    "url": "",
                    "host": "consolar.de",
                    "kind": "beacon_api",
                    "reason": "sendBeacon API 0 Aufruf(e), 0 Code-Hinweis(e); keepalive 2 Aufruf(e), 0 Code-Hinweis(e).",
                    "source": "javascript_api",
                    "category": "telemetry",
                    "provider": "Beacon-/Keepalive-API",
                    "third_party": false,
                    "resource_type": "beacon",
                    "category_label": "Telemetry"
                },
                {
                    "url": "",
                    "host": "google-analytics.com",
                    "kind": "browser_tracking_request",
                    "reason": "xhr-Request mit 20 Query-Schlüssel(n).",
                    "source": "chromium_request",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "_v",
                        "aip",
                        "a",
                        "t",
                        "_s",
                        "dl",
                        "ul"
                    ],
                    "third_party": true,
                    "resource_type": "xhr",
                    "category_label": "Analytics"
                },
                {
                    "url": "",
                    "host": "region1.google-analytics.com",
                    "kind": "browser_tracking_request",
                    "reason": "fetch-Request mit 37 Query-Schlüssel(n).",
                    "source": "chromium_request",
                    "category": "analytics",
                    "provider": "Google Analytics",
                    "query_keys": [
                        "v",
                        "tid",
                        "gtm",
                        "_p",
                        "gcd",
                        "npa",
                        "dma_cps",
                        "dma"
                    ],
                    "third_party": true,
                    "resource_type": "fetch",
                    "category_label": "Analytics"
                }
            ],
            "score": 60,
            "status": "auffällig",
            "summary": "0 Pixel-/Bildtracking-Hinweis(e), 5 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s).",
            "findings": [
                {
                    "id": "beacon_api_usage",
                    "count": 5,
                    "title": "Beacon-/Keepalive-Telemetrie erkannt",
                    "public": true,
                    "category": "privacy",
                    "severity": "warning"
                }
            ],
            "pixel_count": 0,
            "link_ping_count": 0,
            "telemetry_count": 3,
            "beacon_api_count": 0,
            "third_party_count": 2,
            "fetch_keepalive_count": 2,
            "privacy_relevant_count": 2,
            "beacon_code_reference_count": 0,
            "fetch_keepalive_reference_count": 0
        }
    },
    "privacy_analysis": {
        "cookies": {
            "items": [],
            "total": 0,
            "tracking": [],
            "pre_consent": [],
            "missing_secure": [],
            "missing_samesite": [],
            "pre_consent_tracking": [],
            "pre_consent_nonessential": []
        },
        "findings": [],
        "tracking_ids": [
            {
                "type": "google_analytics_4",
                "value": "G-GJQR2QFHW9",
                "provider": "Google Analytics 4"
            },
            {
                "type": "google_universal_analytics",
                "value": "UA-478852-1",
                "provider": "Universal Analytics"
            }
        ],
        "tracking_scripts": [],
        "consent_hint_found": false,
        "privacy_policy_hint_found": true
    },
    "consent_audit": {
        "color": "red",
        "score": 2,
        "checks": [
            {
                "id": "banner_visible",
                "ok": true,
                "label": "Cookie-/Consent-Hinweis sichtbar",
                "detail": "Ein Hinweis mit Cookie-/Einwilligungsbezug wurde im sichtbaren Text erkannt."
            },
            {
                "id": "reject_visible",
                "ok": false,
                "label": "Ablehnen gleichwertig erreichbar",
                "detail": "Ablehnen oder nur notwendige Cookies wurde im Text oder Browser erkannt. Browser-Buttons: 0."
            },
            {
                "id": "settings_visible",
                "ok": true,
                "label": "Einstellungen oder Auswahl vorhanden",
                "detail": "Eine Einstellungs- oder Auswahlmoeglichkeit wurde im Text oder Browser erkannt. Browser-Buttons: 0."
            },
            {
                "id": "browser_reject_visible",
                "ok": true,
                "label": "Ablehnen im sichtbaren Banner",
                "detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
            },
            {
                "id": "browser_settings_visible",
                "ok": true,
                "label": "Einstellungen im sichtbaren Banner",
                "detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
            },
            {
                "id": "reject_equally_prominent",
                "ok": true,
                "label": "Ablehnen nicht deutlich schwaecher dargestellt",
                "detail": "Groessen-Verhältnis Ablehnen/Akzeptieren: nicht messbar."
            },
            {
                "id": "reject_button_clickable",
                "ok": true,
                "label": "Ablehnen technisch klickbar",
                "detail": "Wenn ein Ablehnen-Button sichtbar ist, klickt SaferPage ihn im Chromium-Browser einmal an."
            },
            {
                "id": "no_new_cookies_after_reject",
                "ok": true,
                "label": "Keine neuen Cookies nach Ablehnen",
                "detail": "0 neue Cookie(s) nach dem Ablehnen-Klick."
            },
            {
                "id": "no_tracking_storage_after_reject",
                "ok": true,
                "label": "Kein Tracking-Storage nach Ablehnen",
                "detail": "0 Tracking-Hinweis(e) im Web Storage nach Ablehnen."
            },
            {
                "id": "no_privacy_domains_after_reject",
                "ok": true,
                "label": "Keine neuen Tracking-Kontakte nach Ablehnen",
                "detail": "0 neue datenschutzrelevante Domain(s) nach Ablehnen."
            },
            {
                "id": "gpc_signal_respected",
                "ok": false,
                "label": "GPC-Signal ohne Tracking-Hinweise",
                "detail": "GPC-Aufruf: 3 datenschutzrelevante Domain(s), 0 Drittanbieter-Cookie(s), 0 Storage-Hinweis(e)."
            },
            {
                "id": "no_tracking_cookies_before_consent",
                "ok": false,
                "label": "Keine Tracking-Cookies vor Einwilligung",
                "detail": "5 Tracking-Cookie(s) im Erstaufruf."
            },
            {
                "id": "no_nonessential_cookies_before_consent",
                "ok": false,
                "label": "Keine nicht notwendigen Cookies vor Einwilligung",
                "detail": "7 moeglicherweise nicht notwendige Cookie(s) im Erstaufruf."
            },
            {
                "id": "google_default_restrictive",
                "ok": false,
                "label": "Google Consent Default restriktiv",
                "detail": "Google-Tags brauchen vor dem ersten Laden restriktive Consent-Defaults."
            },
            {
                "id": "third_parties_explained",
                "ok": true,
                "label": "Drittanbieter begrenzt und erklaerbar",
                "detail": "0 datenschutzrelevante Drittanbieter-Domain(s), 3 Drittanbieter insgesamt."
            },
            {
                "id": "storage_without_tracking_hints",
                "ok": true,
                "label": "Web Storage ohne Tracking-Hinweise",
                "detail": "0 Storage-Key(s), 0 Tracking-Hinweis(e)."
            },
            {
                "id": "cmp_api_detected_when_needed",
                "ok": true,
                "label": "CMP-/TCF-Signal bei Tracking erkennbar",
                "detail": "Gängige CMP-/TCF-Indikatoren: __tcfapi, __cmp, Cookiebot, OneTrust oder Usercentrics."
            },
            {
                "id": "accept_click_documented",
                "ok": true,
                "label": "Akzeptieren-Klick nachvollziehbar",
                "detail": "Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0."
            },
            {
                "id": "cmp_state_readable",
                "ok": true,
                "label": "CMP-/TCF-Zustand auslesbar",
                "detail": "TCF TC-String: nein, Cookiebot: nein, OneTrust: nein, Usercentrics: nein."
            },
            {
                "id": "cmp_default_restrictive",
                "ok": true,
                "label": "CMP-Default wirkt restriktiv",
                "detail": "TCF Purposes erlaubt: 0, TCF Vendors erlaubt: 0, Cookiebot Statistik/Marketing: nein."
            }
        ],
        "status": "kritisch",
        "summary": "Consent, Tracking oder Drittanbieter wirken im Erstaufruf deutlich nachbesserungsbeduerftig.",
        "evidence": [
            "7 Cookie(s) beim ersten Aufruf aus HTTP-Headern und Chromium",
            "0 Tracking-Script(s) im HTML",
            "0 datenschutzrelevante Drittanbieter-Domain(s)",
            "0 Storage-Key(s), 0 Tracking-Hinweis(e)",
            "Consent-Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0",
            "Ablehnen/Akzeptieren-Prominenz: nicht messbar",
            "Reject-Test: nicht ausgefuehrt, neue Cookies 0, Tracking-Storage 0, neue Datenschutz-Domains 0",
            "Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0, Drittanbieter-Cookies 0",
            "CMP-State: TCF-String nein, TCF Purposes 0, TCF Vendors 0, Cookiebot nein, OneTrust-Gruppen 0, Usercentrics-Services 0",
            "GPC-Test: aktiv, Datenschutz-Domains 3, Drittanbieter-Cookies 0, Storage-Hinweise 0",
            "CMP-/TCF-Signal: nein",
            "Google Consent Default: nein"
        ],
        "gpc_enabled": true,
        "cmp_detected": false,
        "blocking_plan": {
            "items": [
                {
                    "kind": "cookie",
                    "level": "hoch",
                    "source": "Google",
                    "target": "_ga",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "vor Consent gesetzt · consolar.de · lang (399 Tage)",
                    "category_label": "Analytics"
                },
                {
                    "kind": "cookie",
                    "level": "hoch",
                    "source": "Google",
                    "target": "_ga_B219F06924",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "vor Consent gesetzt · consolar.de · lang (399 Tage)",
                    "category_label": "Analytics"
                },
                {
                    "kind": "cookie",
                    "level": "hoch",
                    "source": "Google",
                    "target": "_ga_GJQR2QFHW9",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "vor Consent gesetzt · consolar.de · lang (399 Tage)",
                    "category_label": "Analytics"
                },
                {
                    "kind": "cookie",
                    "level": "hoch",
                    "source": "Google",
                    "target": "_gat",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "vor Consent gesetzt · consolar.de · kurz (0 Tage)",
                    "category_label": "Analytics"
                },
                {
                    "kind": "cookie",
                    "level": "hoch",
                    "source": "Google",
                    "target": "_gid",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "vor Consent gesetzt · consolar.de · kurz (0 Tage)",
                    "category_label": "Analytics"
                },
                {
                    "kind": "google_consent",
                    "level": "hoch",
                    "source": "Google",
                    "target": "Google Consent Defaults",
                    "recipes": [
                        {
                            "tool": "Google Consent Mode v2"
                        },
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        }
                    ],
                    "category": "tag_manager",
                    "evidence": "Google-Tags erkannt, aber kein Consent-Default vor dem ersten Tag.",
                    "category_label": "Tag-Manager"
                },
                {
                    "kind": "third_party_request",
                    "level": "hoch",
                    "source": "Google Analytics",
                    "target": "google-analytics.com",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "2 Request(s) im Erstaufruf · Analytics",
                    "category_label": "Analytics"
                },
                {
                    "kind": "third_party_request",
                    "level": "hoch",
                    "source": "Google Tag Manager",
                    "target": "googletagmanager.com",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "tag_manager",
                    "evidence": "2 Request(s) im Erstaufruf · Tag-Manager",
                    "category_label": "Tag-Manager"
                },
                {
                    "kind": "third_party_request",
                    "level": "hoch",
                    "source": "Google Analytics",
                    "target": "region1.google-analytics.com",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "analytics",
                    "evidence": "2 Request(s) im Erstaufruf · Analytics",
                    "category_label": "Analytics"
                },
                {
                    "kind": "cookie",
                    "level": "mittel",
                    "source": "consolar.de",
                    "target": "borlabs-cookie",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "unknown",
                    "evidence": "vor Consent gesetzt · consolar.de · lang (364 Tage)",
                    "category_label": "Unklar"
                },
                {
                    "kind": "cookie",
                    "level": "mittel",
                    "source": "consolar.de",
                    "target": "pll_language",
                    "recipes": [
                        {
                            "tool": "Google Tag Manager"
                        },
                        {
                            "tool": "Cookiebot"
                        },
                        {
                            "tool": "Usercentrics"
                        },
                        {
                            "tool": "OneTrust"
                        },
                        {
                            "tool": "Developer-Fallback"
                        }
                    ],
                    "category": "functional",
                    "evidence": "vor Consent gesetzt · consolar.de · lang (364 Tage)",
                    "category_label": "Funktional"
                }
            ],
            "summary": "11 Blockier-/Consent-Maßnahme(n) abgeleitet: 9 hoch, 2 mittel.",
            "available": true,
            "high_count": 9,
            "total_count": 11,
            "type_counts": {
                "cookie": 7,
                "google_consent": 1,
                "third_party_request": 3
            },
            "medium_count": 2
        },
        "tcf_api_found": false,
        "cookiebot_found": false,
        "accept_test_enabled": false,
        "browser_cookie_count": 7,
        "accept_button_clicked": false,
        "browser_storage_count": 0,
        "reject_button_clicked": false,
        "reject_less_prominent": false,
        "tcf_tc_string_present": false,
        "tracking_script_count": 0,
        "accept_button_available": false,
        "reject_button_available": false,
        "reject_prominence_ratio": 0,
        "pre_consent_cookie_count": 7,
        "pre_consent_cookie_names": [
            "_ga",
            "_ga_B219F06924",
            "_ga_GJQR2QFHW9",
            "_gat",
            "_gid",
            "pll_language",
            "borlabs-cookie"
        ],
        "tcf_vendor_consent_count": 0,
        "third_party_domain_count": 3,
        "tcf_purpose_consent_count": 0,
        "onetrust_active_group_count": 0,
        "usercentrics_services_count": 0,
        "browser_accept_control_count": 0,
        "browser_cookie_context_found": true,
        "browser_reject_control_count": 0,
        "gpc_third_party_cookie_count": 0,
        "post_accept_new_cookie_count": 0,
        "post_reject_new_cookie_count": 0,
        "post_accept_new_request_count": 0,
        "browser_settings_control_count": 0,
        "gpc_storage_tracking_hint_count": 0,
        "cookiebot_marketing_or_statistics": false,
        "gpc_privacy_relevant_domain_count": 3,
        "pre_consent_tracking_cookie_count": 5,
        "pre_consent_tracking_cookie_names": [
            "_ga",
            "_ga_B219F06924",
            "_ga_GJQR2QFHW9",
            "_gat",
            "_gid"
        ],
        "privacy_relevant_third_party_count": 0,
        "browser_storage_tracking_hint_count": 0,
        "post_accept_third_party_cookie_count": 0,
        "pre_consent_nonessential_cookie_count": 7,
        "pre_consent_nonessential_cookie_names": [
            "_ga",
            "_ga_B219F06924",
            "_ga_GJQR2QFHW9",
            "_gat",
            "_gid",
            "pll_language",
            "borlabs-cookie"
        ],
        "post_accept_storage_tracking_hint_count": 0,
        "post_reject_storage_tracking_hint_count": 0,
        "post_accept_privacy_relevant_domain_count": 0,
        "post_reject_privacy_relevant_domain_count": 0
    },
    "cookie_inventory": {
        "color": "red",
        "items": [
            {
                "name": "_ga",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-07-14T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "hoch",
                "expires_in_days": 399,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (399 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "_ga_B219F06924",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-07-14T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "hoch",
                "expires_in_days": 399,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (399 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "_ga_GJQR2QFHW9",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-07-14T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "hoch",
                "expires_in_days": 399,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (399 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "_gat",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2026-06-09T22:00:32+00:00",
                "long_lived": false,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "niedrig",
                "expires_in_days": 0,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "short",
                "retention_label": "kurz (0 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "_gid",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2026-06-10T21:59:32+00:00",
                "long_lived": false,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "niedrig",
                "expires_in_days": 0,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "short",
                "retention_label": "kurz (0 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "pll_language",
                "domain": "consolar.de",
                "secure": true,
                "sources": [
                    "browser_first_load"
                ],
                "category": "functional",
                "provider": "consolar.de",
                "tracking": false,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-06-09T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Funktional",
                "retention_risk": "mittel",
                "expires_in_days": 364,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (364 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "borlabs-cookie",
                "domain": "consolar.de",
                "secure": true,
                "sources": [
                    "browser_first_load"
                ],
                "category": "unknown",
                "provider": "consolar.de",
                "tracking": false,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-06-09T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Unklar",
                "retention_risk": "mittel",
                "expires_in_days": 364,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (364 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            }
        ],
        "score": 24,
        "total": 7,
        "status": "kritisch",
        "summary": "7 Cookie(s) inventarisiert: 5 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 5 langlebige Cookie(s), 0 sehr lange Laufzeit(en).",
        "findings": [
            {
                "id": "long_lived_tracking_cookie",
                "count": 3,
                "title": "Langlebige Tracking-/Marketing-Cookies",
                "public": true,
                "category": "privacy",
                "severity": "warning"
            },
            {
                "id": "long_lived_cookie",
                "count": 2,
                "title": "Langlebige Cookies erkannt",
                "public": true,
                "category": "privacy",
                "severity": "info"
            }
        ],
        "categories": {
            "unknown": 1,
            "analytics": 5,
            "functional": 1
        },
        "tracking_count": 5,
        "category_labels": {
            "consent": "Consent",
            "payment": "Zahlung",
            "unknown": "Unklar",
            "security": "Sicherheit",
            "analytics": "Analytics",
            "necessary": "Notwendig",
            "functional": "Funktional",
            "advertising": "Werbung"
        },
        "long_lived_count": 5,
        "persistent_count": 7,
        "first_party_count": 7,
        "pre_consent_count": 7,
        "retention_classes": {
            "long": 5,
            "short": 2
        },
        "third_party_count": 0,
        "missing_secure_count": 5,
        "retention_risk_count": 5,
        "retention_risk_items": [
            {
                "name": "_ga",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-07-14T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "hoch",
                "expires_in_days": 399,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (399 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "_ga_B219F06924",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-07-14T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "hoch",
                "expires_in_days": 399,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (399 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "_ga_GJQR2QFHW9",
                "domain": "consolar.de",
                "secure": false,
                "sources": [
                    "browser_first_load"
                ],
                "category": "analytics",
                "provider": "Google",
                "tracking": true,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-07-14T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Analytics",
                "retention_risk": "hoch",
                "expires_in_days": 399,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (399 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "pll_language",
                "domain": "consolar.de",
                "secure": true,
                "sources": [
                    "browser_first_load"
                ],
                "category": "functional",
                "provider": "consolar.de",
                "tracking": false,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-06-09T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Funktional",
                "retention_risk": "mittel",
                "expires_in_days": 364,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (364 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            },
            {
                "name": "borlabs-cookie",
                "domain": "consolar.de",
                "secure": true,
                "sources": [
                    "browser_first_load"
                ],
                "category": "unknown",
                "provider": "consolar.de",
                "tracking": false,
                "http_only": false,
                "same_site": "Lax",
                "expires_at": "2027-06-09T21:59:32+00:00",
                "long_lived": true,
                "persistent": true,
                "first_party": true,
                "origin_host": "consolar.de",
                "pre_consent": true,
                "source_label": "Chromium-Erstaufruf",
                "category_label": "Unklar",
                "retention_risk": "mittel",
                "expires_in_days": 364,
                "origin_evidence": "46 Browser-Request(s) · document:1, font:4, image:20, script:18",
                "origin_provider": "consolar.de",
                "retention_class": "long",
                "retention_label": "lang (364 Tage)",
                "likely_essential": false,
                "origin_script_url": "",
                "origin_resource_type": ""
            }
        ],
        "very_long_lived_count": 0,
        "missing_samesite_count": 0,
        "persistent_unknown_count": 0,
        "long_lived_tracking_count": 3
    },
    "security_header_analysis": {
        "color": "red",
        "score": 34,
        "checks": [
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "HSTS",
                "value": "",
                "header": "strict-transport-security",
                "present": false,
                "purpose": "Erzwingt HTTPS nach dem ersten sicheren Aufruf.",
                "severity": "warning"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "Content-Security-Policy",
                "value": "",
                "header": "content-security-policy",
                "present": false,
                "purpose": "Begrenzt Skript-, Frame- und Ressourcenquellen im Browser.",
                "severity": "warning"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "X-Frame-Options",
                "value": "",
                "header": "x-frame-options",
                "present": false,
                "purpose": "Reduziert Clickjacking-Risiken bei älteren Browsern.",
                "severity": "warning"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "X-Content-Type-Options",
                "value": "",
                "header": "x-content-type-options",
                "present": false,
                "purpose": "Verhindert MIME-Sniffing bei Skripten und Stylesheets.",
                "severity": "warning"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "Referrer-Policy",
                "value": "",
                "header": "referrer-policy",
                "present": false,
                "purpose": "Begrenzt, welche URL-Informationen an Zielseiten weitergegeben werden.",
                "severity": "info"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "Permissions-Policy",
                "value": "",
                "header": "permissions-policy",
                "present": false,
                "purpose": "Begrenzt sensible Browser-Funktionen pro Seite.",
                "severity": "info"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "Cross-Origin-Opener-Policy",
                "value": "",
                "header": "cross-origin-opener-policy",
                "present": false,
                "purpose": "Isoliert Top-Level-Fenster und reduziert Cross-Origin-Seiteneffekte.",
                "severity": "info"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "Cross-Origin-Resource-Policy",
                "value": "",
                "header": "cross-origin-resource-policy",
                "present": false,
                "purpose": "Begrenzt, welche fremden Seiten Ressourcen einbetten dürfen.",
                "severity": "info"
            },
            {
                "ok": false,
                "note": "Fehlt in der HTTP-Antwort.",
                "label": "Cross-Origin-Embedder-Policy",
                "value": "",
                "header": "cross-origin-embedder-policy",
                "present": false,
                "purpose": "Erzwingt kontrollierte Cross-Origin-Einbettungen und kann Cross-Origin Isolation ermöglichen.",
                "severity": "info"
            }
        ],
        "status": "kritisch",
        "missing": [
            "HSTS",
            "Content-Security-Policy",
            "X-Frame-Options",
            "X-Content-Type-Options",
            "Referrer-Policy",
            "Permissions-Policy",
            "Cross-Origin-Opener-Policy",
            "Cross-Origin-Resource-Policy",
            "Cross-Origin-Embedder-Policy"
        ],
        "summary": "0 von 9 wichtigen Security-Headern vorhanden, 0 korrekt bewertet. Keine Content-Security-Policy gefunden.",
        "findings": [],
        "ok_count": 0,
        "weak_count": 0,
        "csp_analysis": {
            "color": "red",
            "score": 0,
            "status": "fehlt",
            "summary": "Keine Content-Security-Policy gefunden.",
            "enforced": false,
            "findings": [],
            "available": false,
            "directives": [],
            "report_only": false,
            "finding_count": 0,
            "warning_count": 0
        },
        "missing_count": 9,
        "present_count": 0,
        "missing_info_count": 5,
        "missing_warning_count": 4
    },
    "infrastructure_analysis": {
        "signals": {
            "caa": false,
            "dnssec": false,
            "final_https": true,
            "tls_version": "TLSv1.3",
            "hsts_enabled": false,
            "address_count": 1,
            "ipv6_available": false,
            "email_protection": {
                "mx": true,
                "spf": true,
                "dmarc": true
            },
            "certificate_valid": true,
            "certificate_issuer": "R13",
            "certificate_alt_names": [
                "consolar.de",
                "www.consolar.de"
            ],
            "multiple_ip_addresses": false,
            "certificate_expires_at": "Aug 25 08:20:44 2026 GMT",
            "certificate_days_remaining": 76,
            "certificate_hostname_matches": true
        },
        "findings": [
            {
                "id": "caa_missing",
                "title": "CAA-Record fehlt",
                "public": true,
                "category": "dns",
                "severity": "info"
            }
        ],
        "risk_level": "low",
        "positive_signals": [
            "Moderne TLS-Version aktiv: TLSv1.3.",
            "DMARC ist für die Domain vorhanden."
        ]
    },
    "performance_analysis": {
        "score": 94,
        "signals": {
            "compressed": false,
            "duration_ms": 996,
            "image_count": 16,
            "script_count": 18,
            "cache_control": "",
            "content_length": 0,
            "viewport_found": true,
            "stylesheet_count": 3
        },
        "findings": [
            {
                "id": "too_many_render_blocking_assets",
                "title": "Viele potenziell blockierende Assets",
                "public": true,
                "category": "performance",
                "severity": "info"
            }
        ],
        "risk_level": "medium"
    },
    "accessibility_analysis": {
        "color": "red",
        "score": 41,
        "status": "kritisch",
        "signals": {
            "h1_count": 8,
            "image_count": 16,
            "button_count": 1,
            "heading_count": 25,
            "viewport_found": true,
            "html_lang_found": true,
            "form_field_count": 13,
            "image_missing_alt_count": 7,
            "buttons_without_name_count": 0,
            "form_fields_without_label_count": 13
        },
        "summary": "16 Bild(er), 13 Formularfeld(er), 1 Button(s) im passiven HTML-Sample auf Basis-Barrierefreiheit geprüft.",
        "findings": [
            {
                "id": "image_alt_missing",
                "count": 7,
                "title": "Bilder ohne Alternativtext",
                "public": true,
                "category": "accessibility",
                "severity": "info"
            },
            {
                "id": "form_label_missing",
                "count": 13,
                "title": "Formularfelder ohne klare Beschriftung",
                "public": true,
                "category": "accessibility",
                "severity": "warning"
            }
        ],
        "wcag_matrix": {
            "rows": [
                {
                    "id": "wcag_non_text_content",
                    "ok": false,
                    "wcag": "WCAG 1.1.1 Non-text Content",
                    "title": "Alternativtexte für Bilder",
                    "impact": "mittel",
                    "status": "prüfen",
                    "evidence": "7 von 16 Bild(er) ohne alt-Text im HTML-Sample."
                },
                {
                    "id": "wcag_form_labels",
                    "ok": false,
                    "wcag": "WCAG 1.3.1 Info and Relationships / 3.3.2 Labels or Instructions",
                    "title": "Formularfelder beschriften",
                    "impact": "hoch",
                    "status": "prüfen",
                    "evidence": "13 von 13 Formularfeld(er) ohne erkennbare Beschriftung."
                },
                {
                    "id": "wcag_button_names",
                    "ok": true,
                    "wcag": "WCAG 4.1.2 Name, Role, Value",
                    "title": "Buttons mit Namen versehen",
                    "impact": "niedrig",
                    "status": "ok",
                    "evidence": "0 von 1 Button(s) ohne erkennbaren Namen."
                },
                {
                    "id": "wcag_page_language",
                    "ok": true,
                    "wcag": "WCAG 3.1.1 Language of Page",
                    "title": "Seitensprache auszeichnen",
                    "impact": "niedrig",
                    "status": "ok",
                    "evidence": "HTML-lang-Attribut gefunden."
                },
                {
                    "id": "wcag_heading_structure",
                    "ok": true,
                    "wcag": "WCAG 1.3.1 Info and Relationships / 2.4.6 Headings and Labels",
                    "title": "Überschriftenstruktur",
                    "impact": "niedrig",
                    "status": "ok",
                    "evidence": "8 H1 und 25 Überschrift(en) im HTML-Sample."
                },
                {
                    "id": "wcag_mobile_reflow",
                    "ok": true,
                    "wcag": "WCAG 1.4.10 Reflow",
                    "title": "Mobile Viewport-Basis",
                    "impact": "niedrig",
                    "status": "ok",
                    "evidence": "Viewport-Meta-Tag gefunden."
                }
            ],
            "summary": "2 WCAG-/EAA-Prüfpunkt(e) auffällig, davon 1 mit hoher Auswirkung.",
            "standard": "WCAG 2.2 orientierte Basisprüfung",
            "available": true,
            "issue_count": 2,
            "high_impact_count": 1
        }
    },
    "domain_history": {
        "status": [
            "active"
        ],
        "summary": "RDAP liefert kein klares Registrierungsdatum.",
        "age_days": null,
        "findings": [],
        "available": true,
        "registrar": "",
        "expires_at": "",
        "risk_level": "unknown",
        "registered_at": "",
        "expires_in_days": null,
        "last_changed_at": "2026-04-18T15:47:00+00:00"
    },
    "data_entry_analysis": {
        "forms": [],
        "score": 100,
        "summary": "Die Seite kann Name/personenbezogene Daten, Newsletter, Kontaktformular abfragen.",
        "findings": [],
        "form_count": 0,
        "risk_level": "low",
        "field_count": 13,
        "asks_for_data": true,
        "payment_providers": [],
        "detected_data_types": [
            {
                "id": "personal",
                "count": 13,
                "label": "Name/personenbezogene Daten"
            },
            {
                "id": "newsletter",
                "count": 1,
                "label": "Newsletter"
            },
            {
                "id": "contact",
                "count": 1,
                "label": "Kontaktformular"
            }
        ],
        "privacy_context_found": true,
        "operator_context_found": true
    },
    "pii_exposure_analysis": {
        "color": "yellow",
        "score": 82,
        "checks": [
            {
                "id": "current_url",
                "ok": true,
                "count": 0,
                "label": "Aktuelle URL",
                "detail": "Keine sensiblen Query-Parameter erkannt."
            },
            {
                "id": "link_queries",
                "ok": true,
                "count": 0,
                "label": "Link-Parameter",
                "detail": "Keine sensiblen Link-Querys erkannt."
            },
            {
                "id": "get_forms",
                "ok": true,
                "count": 0,
                "label": "GET-Formulare",
                "detail": "Keine personenbezogenen GET-Formulare erkannt."
            },
            {
                "id": "external_forms",
                "ok": true,
                "count": 0,
                "label": "Externe Formularziele",
                "detail": "Keine externen Formularziele mit personenbezogenen Feldern erkannt."
            },
            {
                "id": "tracking_context",
                "ok": false,
                "count": 3,
                "label": "Tracking neben Dateneingabe",
                "detail": "3 datenschutzrelevante Drittanbieter."
            }
        ],
        "status": "prüfen",
        "summary": "1 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext.",
        "findings": [
            {
                "id": "pii_tracking_on_data_entry_page",
                "title": "Dateneingabe und datenschutzrelevante Drittanbieter im selben Browseraufruf",
                "public": true,
                "category": "privacy",
                "severity": "warning",
                "third_party_count": 3
            }
        ],
        "link_hits": [],
        "finding_count": 1,
        "current_url_hits": [],
        "tracking_context": true,
        "sensitive_get_forms": []
    },
    "scan_history_analysis": {
        "available": false,
        "summary": "Noch kein früherer gespeicherter Scan für diese Domain vorhanden.",
        "total_scan_count": 1,
        "previous_scan_count": 0,
        "history": [
            {
                "scan_id": "27ddda29-c498-422e-8554-ef599bb6a4b6",
                "created_at": "2026-06-09 23:59:42.959873+02",
                "score": 0,
                "verdict": "riskant",
                "finding_count": 138,
                "integrity_root_hash": "a2af93affedd66fe0f431f83329f2dfd6706256369842c2d16757c482833314e",
                "integrity_available_hash_count": 9,
                "current": true
            }
        ],
        "new_findings": [],
        "resolved_findings": [],
        "technical_changes": {
            "available": false,
            "summary": "Noch kein früherer Scan für technische Änderungen vorhanden."
        }
    },
    "benchmark_analysis": {
        "host": "consolar.de",
        "rank": 1,
        "score": 0,
        "status": "im_mittelfeld",
        "summary": "consolar.de liegt mit 0 Punkten ungefähr im gespeicherten Vergleichsfeld. Weil viele gespeicherte Checks bei 0 Punkten liegen, zeigt die Detailansicht zusätzlich aktive Peers mit Durchschnitt 17.5.",
        "available": true,
        "peer_count": 1338,
        "percentile": 0,
        "distribution": {
            "0_39": 1333,
            "40_59": 4,
            "60_79": 1,
            "80_100": 0
        },
        "median_score": 0,
        "average_score": 1.1,
        "comparison_basis": "Neuester gespeicherter SaferPage-Scan je Domain; überwiegend deutschsprachige gespeicherte Checks.",
        "same_score_count": 0,
        "better_than_count": 0,
        "qualified_peer_count": 82,
        "zero_score_count": 1256,
        "top_quartile_score": 0,
        "top_decile_score": 0,
        "qualified_average_score": 17.5,
        "qualified_median_score": 16,
        "qualified_top_quartile_score": 24,
        "qualified_top_decile_score": 36,
        "thresholds": [
            {
                "id": "critical",
                "label": "Kritisch",
                "range": "0-39",
                "met": true
            },
            {
                "id": "basic",
                "label": "Basis stabilisieren",
                "range": "40-59",
                "met": false
            },
            {
                "id": "managed",
                "label": "Gesteuert",
                "range": "60-79",
                "met": false
            },
            {
                "id": "strong",
                "label": "Stark",
                "range": "80-100",
                "met": false
            }
        ],
        "risk_tier": "kritisch",
        "target_score": 40,
        "aspirational_target_score": 60,
        "gap_to_target": 40,
        "gap_to_top_quartile": 24,
        "gap_to_strong": 80,
        "query_mode": "php_ttl_cache_refresh",
        "cache_ttl_seconds": 300
    },
    "audit_receipt": {
        "url": "https://consolar.de/",
        "host": "consolar.de",
        "status": "verfügbar",
        "bot_url": "https://saferpage.de/bot",
        "summary": "Prüfbeleg für consolar.de: kontrollierter HTTP-/Browser-Kurzcheck mit 52 Request(s), 4 Consent-Zustand/Zuständen und 7 Artefakt(en).",
        "renderer": "playwright-chromium",
        "artifacts": [
            {
                "label": "Öffentlicher Kurzreport",
                "detail": "https://saferpage.de/consolar.de",
                "status": "verfügbar"
            },
            {
                "label": "JSON-Export",
                "detail": "Maschinenlesbarer Report mit Modulen, Nachweisen und Tabellen.",
                "status": "verfügbar"
            },
            {
                "label": "CSV-Export",
                "detail": "Tabellarische Prüfzeilen für Betreiber, Datenschutz und Technik.",
                "status": "verfügbar"
            },
            {
                "label": "160x150 Seitenvorschau",
                "detail": "/cache/screenshots/consolar.de-160x150-e5a33d8c84c7f928b6.png",
                "status": "verfügbar"
            },
            {
                "label": "Cookie-Erklärung",
                "detail": "7 Cookie-/Storage-Eintrag/Einträge.",
                "status": "kritisch"
            },
            {
                "label": "Empfänger-/Anbieterinventar",
                "detail": "3 Anbieterzeile(n), 3 AVV-/Rollenprüfung(en).",
                "status": "kritisch"
            },
            {
                "label": "Barrierefreiheitserklärung-Entwurf",
                "detail": "2 bekannte Barrierefreiheits-Punkt(e).",
                "status": "Nicht vollständig konform im automatischen Basischeck"
            }
        ],
        "available": true,
        "final_url": "https://www.consolar.de/de/home/",
        "checked_at": "2026-06-09T21:59:42+00:00",
        "share_text": "SaferPage Prüfbeleg consolar.de: 52 Browser-Request(s), 3 Drittanbieter, 7 Cookie-/Storage-Einträge, geprüft am 2026-06-09T21:59:42.",
        "user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests)",
        "limitations": [
            "Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
            "Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
            "Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
        ],
        "scan_context": "crawler",
        "coverage_items": [
            {
                "label": "HTTP/DNS/TLS",
                "value": "HTTP 200 · DNS ok · TLS ok"
            },
            {
                "label": "Browserlauf",
                "value": "52 Request(s), 3 Drittanbieter-Domain(s), 7 Browser-Cookie(s)."
            },
            {
                "label": "Consent-Zustände",
                "value": "4 Zustand/Zustände: Default, Ablehnen, Akzeptieren und GPC soweit verfügbar."
            },
            {
                "label": "Seitenabdeckung",
                "value": "8 priorisierte Unterseite(n) im Nachweispack."
            },
            {
                "label": "Drittanbieter-Auszug",
                "value": "3 Anbieterzeile(n) im öffentlichen Nachweis."
            },
            {
                "label": "Cookie-Auszug",
                "value": "7 Cookie-Zeile(n) im öffentlichen Nachweis."
            }
        ],
        "confidence_score": 35,
        "browser_final_url": "https://www.consolar.de/de/home/"
    },
    "evidence_integrity_manifest": {
        "host": "consolar.de",
        "status": "verfügbar",
        "summary": "Integritätsmanifest für consolar.de: 9/9 Nachweisbereich(e) mit SHA-256-Hash dokumentiert.",
        "sections": [
            {
                "id": "audit_receipt",
                "hash": "be4a64e91700ebb12de1327c883da5e585ed0180aa548e4e338df7d6f811a8fb",
                "count": 18,
                "label": "Prüfbeleg",
                "detail": "Kanonischer JSON-Hash des kompakten Prüfbelegs.",
                "status": "verfügbar"
            },
            {
                "id": "protocol",
                "hash": "3503b96c9b083869193e5a73e2ec8015f6530d7583c39e62711aec9e86a50485",
                "count": 15,
                "label": "Scan-Protokoll",
                "detail": "URL, Endziel, User-Agent, Zeitstempel, HTTP/DNS/TLS und Renderer.",
                "status": "verfügbar"
            },
            {
                "id": "checkpoints",
                "hash": "267317bd18c6cd6edfc4c081c8fcd4fa48c9399e0e7181c9adf06efa9576c169",
                "count": 6,
                "label": "Prüfschritte",
                "detail": "Kanonischer JSON-Hash der dokumentierten Prüfstationen.",
                "status": "verfügbar"
            },
            {
                "id": "consent_states",
                "hash": "2a21bb20a496c024cef1855faf1abbf66e74c099d82c760c18561c4356411ccb",
                "count": 4,
                "label": "Consent-Zustände",
                "detail": "Default-, Ablehnen-, Akzeptieren- und GPC-Nachweise soweit verfügbar.",
                "status": "verfügbar"
            },
            {
                "id": "third_party_evidence",
                "hash": "10f3f67b846511cf35c825c4ebb0f5315158a47240085ccf9e460d08a442dc73",
                "count": 3,
                "label": "Drittanbieter-Auszug",
                "detail": "Sanitisierte Anbieter-, Kategorie-, Transfer- und Request-Zählwerte.",
                "status": "verfügbar"
            },
            {
                "id": "cookie_evidence",
                "hash": "76bde87121d2e68b1e44c3faf1216720ea4582e6f0266d5c698a6819ba8d5d19",
                "count": 7,
                "label": "Cookie-Auszug",
                "detail": "Sanitisierte Cookie-Metadaten ohne Cookie-Werte.",
                "status": "verfügbar"
            },
            {
                "id": "request_samples",
                "hash": "898486bc56af0ad29b5589be5db90bd334cea2acd4031681ac68045e3206c5fb",
                "count": 6,
                "label": "Request-Samples",
                "detail": "Sanitisierte Drittanbieter-Samples ohne vollständige Request-URLs.",
                "status": "verfügbar"
            },
            {
                "id": "checked_pages",
                "hash": "918dba2e60c76a231334e65476cf5c4f65a017ab71d4b8df506b61fb28d61fc1",
                "count": 8,
                "label": "Geprüfte Unterseiten",
                "detail": "Priorisierte Pfade aus Sitemap, Pflichtseiten und interner Linkstruktur.",
                "status": "verfügbar"
            },
            {
                "id": "screenshot_file",
                "hash": "91d6e2886f21e651c633fed0a8e0580dffadc0ea6da3f319a63067f871fbf8c3",
                "count": 2715,
                "label": "160x150 Seitenvorschau-Datei",
                "detail": "/cache/screenshots/consolar.de-160x150-e5a33d8c84c7f928b6.png",
                "status": "verfügbar"
            }
        ],
        "algorithm": "sha256",
        "available": true,
        "root_hash": "a2af93affedd66fe0f431f83329f2dfd6706256369842c2d16757c482833314e",
        "checked_at": "2026-06-09T21:59:42+00:00",
        "limitations": [
            "Das Manifest schützt die im Report veröffentlichten/sanitisierten Nachweise, nicht verdeckte Cookie-Werte oder vollständige Request-URLs.",
            "Ohne externe qualifizierte Zeitstempelung beweist der Hash Integrität des exportierten Artefakts, aber keine amtliche Zustellung."
        ],
        "section_count": 9,
        "canonicalization": "JSON UTF-8, sort_keys=true, kompakte Separatoren; Screenshot als rohe Datei-Bytes.",
        "available_hash_count": 9
    },
    "audit_evidence_pack": {
        "status": "verfügbar",
        "summary": "Nachweisprotokoll mit 52 Browser-Request(s), 7 Cookie-Nachweis(en), 3 Drittanbieter-Auszug/auszügen und 4 Consent-Zustand/Zuständen.",
        "protocol": {
            "host": "consolar.de",
            "dns_ok": true,
            "tls_ok": true,
            "bot_url": "https://saferpage.de/bot",
            "renderer": "playwright-chromium",
            "final_url": "https://www.consolar.de/de/home/",
            "input_url": "https://consolar.de/",
            "checked_at": "2026-06-09T21:59:42+00:00",
            "user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests)",
            "http_status": 200,
            "scan_context": "crawler",
            "screenshot_url": "/cache/screenshots/consolar.de-160x150-e5a33d8c84c7f928b6.png",
            "googlebot_status": 200,
            "browser_final_url": "https://www.consolar.de/de/home/",
            "dns_address_count": 1
        },
        "checkpoints": [
            {
                "label": "DNS",
                "detail": "1 Adresse(n) aufgelöst.",
                "status": "ok"
            },
            {
                "label": "TLS/HTTPS",
                "detail": "TLSv1.3",
                "status": "ok"
            },
            {
                "label": "HTTP-Abruf",
                "detail": "Status 200, Endziel https://www.consolar.de/de/home/.",
                "status": "ok"
            },
            {
                "label": "Browserlauf",
                "detail": "52 Request(s), 3 Drittanbieter-Domain(s).",
                "status": "ok"
            },
            {
                "label": "Consent-Zustände",
                "detail": "Default, Ablehnen, Akzeptieren und GPC werden soweit möglich gegenübergestellt.",
                "status": "prüfen"
            },
            {
                "label": "Exports",
                "detail": "PDF/Druck, JSON und CSV enthalten die wesentlichen Prüfnachweise.",
                "status": "verfügbar"
            }
        ],
        "limitations": [
            "Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
            "Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
            "Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
        ],
        "checked_pages": [
            {
                "path": "/de/datenschutz",
                "source": "homepage_link+sitemap",
                "status": 0,
                "category": "datenschutz"
            },
            {
                "path": "/en/privacy-policy",
                "source": "sitemap",
                "status": 0,
                "category": "datenschutz"
            },
            {
                "path": "/de/impressum",
                "source": "homepage_link",
                "status": 0,
                "category": "impressum"
            },
            {
                "path": "/de/cookie-einstellungen",
                "source": "homepage_link+sitemap",
                "status": 0,
                "category": "cookies"
            },
            {
                "path": "/de/kontakt",
                "source": "homepage_link",
                "status": 0,
                "category": "kontakt"
            },
            {
                "path": "/en/terms",
                "source": "sitemap",
                "status": 0,
                "category": "agb"
            },
            {
                "path": "/de/agb",
                "source": "homepage_link",
                "status": 0,
                "category": "agb"
            },
            {
                "path": "/de/newsletter",
                "source": "homepage_link+sitemap",
                "status": 0,
                "category": "newsletter"
            }
        ],
        "cookie_evidence": [
            {
                "name": "_ga",
                "domain": "consolar.de",
                "secure": false,
                "category": "Analytics",
                "provider": "Google",
                "tracking": true,
                "retention": "lang (399 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            },
            {
                "name": "_ga_B219F06924",
                "domain": "consolar.de",
                "secure": false,
                "category": "Analytics",
                "provider": "Google",
                "tracking": true,
                "retention": "lang (399 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            },
            {
                "name": "_ga_GJQR2QFHW9",
                "domain": "consolar.de",
                "secure": false,
                "category": "Analytics",
                "provider": "Google",
                "tracking": true,
                "retention": "lang (399 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            },
            {
                "name": "_gat",
                "domain": "consolar.de",
                "secure": false,
                "category": "Analytics",
                "provider": "Google",
                "tracking": true,
                "retention": "kurz (0 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            },
            {
                "name": "_gid",
                "domain": "consolar.de",
                "secure": false,
                "category": "Analytics",
                "provider": "Google",
                "tracking": true,
                "retention": "kurz (0 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            },
            {
                "name": "pll_language",
                "domain": "consolar.de",
                "secure": true,
                "category": "Funktional",
                "provider": "consolar.de",
                "tracking": false,
                "retention": "lang (364 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            },
            {
                "name": "borlabs-cookie",
                "domain": "consolar.de",
                "secure": true,
                "category": "Unklar",
                "provider": "consolar.de",
                "tracking": false,
                "retention": "lang (364 Tage)",
                "same_site": "Lax",
                "pre_consent": true
            }
        ],
        "browser_evidence": {
            "gpc_enabled": true,
            "request_count": 52,
            "storage_total": 0,
            "accept_clicked": false,
            "reject_clicked": false,
            "browser_cookie_count": 7,
            "contacted_domain_count": 4,
            "third_party_domain_count": 3,
            "storage_tracking_hint_count": 0,
            "privacy_relevant_domain_count": 3
        },
        "storage_evidence": {
            "tracking_key_hints": [],
            "local_storage_total": 0,
            "session_storage_total": 0
        },
        "third_party_evidence": [
            {
                "host": "google-analytics.com",
                "category": "Analytics",
                "provider": "Google Analytics",
                "transfer": "Drittland/USA",
                "risk_level": "hoch",
                "request_count": 2,
                "resource_types": [
                    "script",
                    "xhr"
                ],
                "privacy_relevant": true
            },
            {
                "host": "region1.google-analytics.com",
                "category": "Analytics",
                "provider": "Google Analytics",
                "transfer": "Drittland/USA",
                "risk_level": "hoch",
                "request_count": 2,
                "resource_types": [
                    "fetch"
                ],
                "privacy_relevant": true
            },
            {
                "host": "googletagmanager.com",
                "category": "Tag-Manager",
                "provider": "Google Tag Manager",
                "transfer": "Drittland/USA",
                "risk_level": "hoch",
                "request_count": 2,
                "resource_types": [
                    "script"
                ],
                "privacy_relevant": true
            }
        ],
        "external_script_count": 0,
        "consent_state_evidence": [
            {
                "label": "Erstaufruf",
                "cookie_count": 0,
                "domain_count": 3,
                "request_count": 6,
                "storage_tracking_hint_count": 0,
                "privacy_relevant_domain_count": 3
            },
            {
                "label": "Nach Ablehnen neu",
                "cookie_count": 0,
                "domain_count": 0,
                "request_count": 0,
                "storage_tracking_hint_count": 0,
                "privacy_relevant_domain_count": 0
            },
            {
                "label": "Nach Akzeptieren neu",
                "cookie_count": 0,
                "domain_count": 0,
                "request_count": 0,
                "storage_tracking_hint_count": 0,
                "privacy_relevant_domain_count": 0
            },
            {
                "label": "GPC-Aufruf",
                "cookie_count": 0,
                "domain_count": 3,
                "request_count": 6,
                "storage_tracking_hint_count": 0,
                "privacy_relevant_domain_count": 3
            }
        ],
        "request_sample_evidence": [
            {
                "host": "google-analytics.com",
                "query_keys": [],
                "resource_type": "script",
                "query_key_count": 0,
                "referrer_has_path": false,
                "referrer_has_query": false,
                "sensitive_query_key_count": 0
            },
            {
                "host": "googletagmanager.com",
                "query_keys": [
                    "id"
                ],
                "resource_type": "script",
                "query_key_count": 1,
                "referrer_has_path": false,
                "referrer_has_query": false,
                "sensitive_query_key_count": 0
            },
            {
                "host": "google-analytics.com",
                "query_keys": [
                    "v",
                    "_v",
                    "aip",
                    "a",
                    "t",
                    "_s",
                    "dl",
                    "ul"
                ],
                "resource_type": "xhr",
                "query_key_count": 20,
                "referrer_has_path": false,
                "referrer_has_query": false,
                "sensitive_query_key_count": 0
            },
            {
                "host": "googletagmanager.com",
                "query_keys": [
                    "id",
                    "cx",
                    "_slc"
                ],
                "resource_type": "script",
                "query_key_count": 3,
                "referrer_has_path": false,
                "referrer_has_query": false,
                "sensitive_query_key_count": 0
            },
            {
                "host": "region1.google-analytics.com",
                "query_keys": [
                    "v",
                    "tid",
                    "gtm",
                    "_p",
                    "gcd",
                    "npa",
                    "dma_cps",
                    "dma"
                ],
                "resource_type": "fetch",
                "query_key_count": 37,
                "referrer_has_path": false,
                "referrer_has_query": false,
                "sensitive_query_key_count": 1
            },
            {
                "host": "region1.google-analytics.com",
                "query_keys": [
                    "v",
                    "tid",
                    "gtm",
                    "_p",
                    "gcd",
                    "npa",
                    "dma_cps",
                    "dma"
                ],
                "resource_type": "fetch",
                "query_key_count": 37,
                "referrer_has_path": false,
                "referrer_has_query": false,
                "sensitive_query_key_count": 1
            }
        ]
    },
    "adtech_transparency_evidence": {
        "schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
        "available": false,
        "status": "not_in_stored_report",
        "summary": "Dieser gespeicherte Scan enthält keine AdTech-Transparenzdatei-Evidence. Daraus wird keine Aussage zu Werbeinventarqualität, Fraud-Freiheit, Consent-Konformität oder Anbieterberechtigung abgeleitet.",
        "guardrails": [
            "Nur als Boundary exportiert",
            "Keine Nachbewertung alter Scans",
            "Keine Betreiber-Empfehlung im Testresult-JSON"
        ]
    },
    "security_trust_policy_evidence": {
        "schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
        "available": false,
        "status": "not_in_stored_report",
        "summary": "Dieser gespeicherte Scan enthält keine security.txt-Evidence. Daraus wird keine Aussage zu Security-Reife, Reaktionszeit oder Disclosure-Prozess abgeleitet.",
        "guardrails": [
            "Nur als Boundary exportiert",
            "Keine Nachbewertung alter Scans",
            "Keine Betreiber-Empfehlung im Testresult-JSON"
        ]
    }
}