Scan-Fakten als JSON anzeigen
{
"schema": "https://saferpage.de/schemas/public-scan-facts.v1",
"claim_boundary": "Öffentliche Rohdaten enthalten nur Scan-Fakten, Statuswerte, Evidence-Grenzen und feste Detail-/Hintergrund-Links. Betreiber-Hintergrund, Planungen, Checklisten, Code und allgemeine Empfehlungen stehen auf separaten Seiten.",
"current_evidence_policy": {
"schema": "https://saferpage.de/schemas/public-scan-current-evidence-policy.v1",
"status": "current_scan_fields_only",
"summary": "Der Fakten-JSON exportiert nur Felder, die im gespeicherten aktuellen Scan wirklich vorhanden sind. Fehlende neue Evidence wird nicht aus alten Testergebnisformaten nachgebaut.",
"guardrails": [
"Keine synthetischen Boundary-Fallbacks fuer alte Scans",
"Keine Nachbewertung alter Testergebnisse im Fakten-JSON",
"Keine Betreiber-Empfehlung im Report-JSON"
]
},
"host": "mpq.mpg.de",
"normalized_url": "https://mpq.mpg.de/",
"score": 60,
"verdict": {
"color": "orange",
"label": "auffällig",
"score": 60
},
"scan_id": "42a0bc6b-12ac-4422-92d5-05d831614e06",
"created_at": "2026-06-20 12:25:10.228917+02",
"evidence": {
"dns": {
"ok": true,
"addresses": [
"134.76.31.205"
],
"duration_ms": 1
},
"tls": {
"ok": true,
"cipher": "TLS_AES_128_GCM_SHA256",
"issuer": [
[
[
"countryName",
"GR"
]
],
[
[
"organizationName",
"Hellenic Academic and Research Institutions CA"
]
],
[
[
"commonName",
"GEANT TLS RSA 1"
]
]
],
"subject": [
[
[
"countryName",
"DE"
]
],
[
[
"stateOrProvinceName",
"Bayern"
]
],
[
[
"localityName",
"Muenchen"
]
],
[
[
"organizationName",
"Max-Planck-Gesellschaft"
]
],
[
[
"commonName",
"cert05.cms.mpg.de"
]
]
],
"version": "TLSv1.3",
"not_after": "Nov 7 16:55:14 2026 GMT",
"hostname_matches": true,
"days_until_expiry": 140,
"subject_alt_names": [
"cert05.cms.mpg.de",
"thirdinfinity.mpg.de",
"mpi-halle.mpg.de",
"mpqueer.mpg.de",
"www.eubuero.mpq.mpg.de",
"www.schloss-ringberg.mpg.de",
"neuro.mpg.de",
"mpi-stuttgart.mpg.de",
"www.neuro.mpg.de",
"phdnet.mpg.de",
"orn.mpg.de",
"dawn.mps.mpg.de",
"mpl.mpg.de",
"intranet.mpq.mpg.de",
"mpusp.mpg.de",
"mpsd.mpg.de",
"intranet.neuro.mpg.de",
"www.tax.mpg.de",
"www.mps.mpg.de",
"schloss-ringberg.mpg.de",
"www.mpl.mpg.de",
"www.ngice.mpg.de",
"www.psych.mpg.de",
"www.law.mpg.de",
"www.phdnet.mpg.de",
"www.imprs-stns.mpg.de",
"www.social.mpg.de",
"www.orn.mpg.de",
"mps.mpg.de",
"intranet.mpi-marburg.mpg.de",
"www.imprs-neurocom.mpg.de",
"www.mpqueer.mpg.de",
"eubuero.mpq.mpg.de",
"www.mpipz.mpg.de",
"mpq.mpg.de",
"tax.mpg.de",
"intranet.shh.mpg.de",
"www.mpi-muenster.mpg.de",
"www.mpusp.mpg.de",
"www.mpi-stuttgart.mpg.de",
"www.mpsd.mpg.de",
"mpi-marburg.mpg.de",
"www.mpiz-koeln.mpg.de",
"ngice.mpg.de",
"social.mpg.de",
"imprs-neurocom.cbs.mpg.de",
"mpiz-koeln.mpg.de",
"www.sf.mpg.de",
"www.rosetta.mps.mpg.de",
"rosetta.mps.mpg.de",
"www.mpi-marburg.mpg.de",
"www.mpq.mpg.de",
"mpi-muenster.mpg.de",
"www.mpipsykl.mpg.de",
"imprs-neurocom.mpg.de",
"sf.mpg.de",
"mpipsykl.mpg.de",
"mqm.mpsd.mpg.de",
"psych.mpg.de",
"www.dawn.mps.mpg.de",
"imprs-stns.mpg.de",
"intranet.mpipz.mpg.de",
"www.mpi-halle.mpg.de",
"www.thirdinfinity.mpg.de",
"law.mpg.de",
"mpipz.mpg.de"
],
"issuer_common_name": "GEANT TLS RSA 1"
},
"http": {
"ok": true,
"status": 200,
"headers": {
"date": "Sat, 20 Jun 2026 10:24:43 GMT",
"etag": "W/\"486ebeee9d44b7ec3d61199c2a55ea22\"",
"link": "</assets/roboto-v20-latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-700-8d2872cf0efbd26ce09519f2ebe27fb09f148125cf65964890cc98562e8d7aa3.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous",
"vary": "Accept-Encoding",
"server": "Apache",
"status": "200 OK",
"connection": "close",
"set-cookie": "_mpg_session_r=Q3d5fhYTqTbY94TbS1x4Lz2NUH0JVXgkoonHFI3K4e%2FRTzHaSeNeOs2ALOxuOm1WZvLCJJa9Tyidk1UvL%2FxS4lfpmg40xWU5%2FdPh49T%2Fs%2F6liSZwggey%2BBTssyBfUPEbBiQoJTf7vQi%2BbavNvWcbTBlnZ7tCohtJyarzuMwxvFytwnrW6CNc24KQTtDagmp48C2JbeNSIrsStFFBfO4srAqJaHlVQ8qmJtyQCFHthNoYyqb3haSmv%2FPMszyYOYmTjv7On5k8GMjM7ti3yogeK3v1NBVGKQ%3D%3D--YfvrahsJae8oh7uT--W2ng4bbeWICQ1cMhUa9ZYw%3D%3D; path=/; httponly; samesite=lax",
"content-type": "text/html; charset=utf-8",
"x-request-id": "ff3dc4ec-4913-4902-9d8e-30a1e8957902",
"cache-control": "max-age=120, public",
"referrer-policy": "strict-origin-when-cross-origin",
"x-frame-options": "SAMEORIGIN",
"x-ua-compatible": "IE=Edge",
"x-xss-protection": "0",
"transfer-encoding": "chunked",
"x-content-type-options": "nosniff",
"content-security-policy": "frame-ancestors 'self' https://statistik.mpg.de",
"x-permitted-cross-domain-policies": "none"
},
"body_size": 200000,
"final_url": "https://www.mpq.mpg.de/",
"duration_ms": 233
},
"scanner": {
"bot_url": "https://saferpage.de/bot",
"context": "crawler",
"user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests; kostenloser Report: <a href=\"https://saferpage.de/mpq.mpg.de\">https://saferpage.de/mpq.mpg.de</a>)",
"default_user_agent": "SaferPageBot/0.2 (+https://saferpage.de/bot; passive website safety check; no attack tests)"
},
"domain_records": {
"mx": true,
"caa": false,
"spf": true,
"dmarc": false,
"dnssec": false,
"records": {
"mx": [
"10 a1234.mx.srv.dfn.de.",
"10 b1234.mx.srv.dfn.de.",
"10 c1234.mx.srv.dfn.de."
],
"ns": [
"estragon.mpcdf.mpg.de.",
"sat.mpcdf.mpg.de.",
"sat9.mpcdf.mpg.de."
],
"caa": [],
"txt": [
"MS=9F572114001DF9EFD73B05A7270B9F6C3C80EC75",
"adobe-idp-site-verification=27f9f9b37a4783749f809d83dd41bc1bf84299172e460bdbc9ba5271bbdf24e2",
"v=spf1 mx include:spf.mpcdf.mpg.de include:spf.gwdg.de ~all",
"cisco-ci-domain-verification=607f646b7cdcf4139e2a642bbccf6d709911fa4730f93fedc829efe0897a752c"
],
"cname": [],
"dmarc": [],
"dnskey_present": false
},
"spf_includes": [
"spf.mpcdf.mpg.de",
"spf.gwdg.de"
],
"verifications": [
"microsoft",
"adobe"
]
},
"googlebot_http": {
"ok": true,
"status": 200,
"headers": {
"date": "Sat, 20 Jun 2026 10:24:43 GMT",
"etag": "W/\"1dba23bf23d3eae5027f867d74eb6be9\"",
"link": "</assets/roboto-v20-latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-700-8d2872cf0efbd26ce09519f2ebe27fb09f148125cf65964890cc98562e8d7aa3.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous",
"vary": "Accept-Encoding",
"server": "Apache",
"status": "200 OK",
"connection": "close",
"set-cookie": "_mpg_session_r=Nu22ZsMGhbgRTFSlDZdqjtAOu%2FP16UWyGS1uGcsFij5lNF1lxSdDqgN9iek3aEhN3ml022tS%2F24Kr62MM8kpWphON3IvyEij7mALAL0sk5AoSXmKY5fp%2BzBabRN4giPHqjqyM1WcElMPJO3D%2FNh74r55nYv080WS5HHS8mkjwowq5cQrQv04F%2BpnoIqIP7sWqohQZpz14ZjgT065z7eb7f0vDP3N7W3y9PoLvxy084n8%2BBnrObMqVaKacG67vyoE7N%2BNZxwMX6ppZzalNKhgdXvqrjDTJw%3D%3D--08GzfX6E0JoG9Xqw--r%2BbZmjehE%2BwGhulsM0DItw%3D%3D; path=/; httponly; samesite=lax",
"content-type": "text/html; charset=utf-8",
"x-request-id": "83d5b555-a94a-4fd3-bfe2-4c31d358488b",
"cache-control": "max-age=120, public",
"referrer-policy": "strict-origin-when-cross-origin",
"x-frame-options": "SAMEORIGIN",
"x-ua-compatible": "IE=Edge",
"x-xss-protection": "0",
"transfer-encoding": "chunked",
"x-content-type-options": "nosniff",
"content-security-policy": "frame-ancestors 'self' https://statistik.mpg.de",
"x-permitted-cross-domain-policies": "none"
},
"body_size": 200000,
"final_url": "https://www.mpq.mpg.de/",
"duration_ms": 343
},
"ai_search_policy_evidence": {
"files": [
{
"id": "robots_txt",
"url": "https://www.mpq.mpg.de/robots.txt",
"label": "robots.txt",
"reason": "",
"status": "found",
"body_size": 91,
"truncated": false,
"body_sha256": "0430a3a4bf3fc6449ecca48e34a4938b11bd2419fab62b972d37f0ec4c188090",
"duration_ms": 187,
"http_status": 200,
"ai_bot_policy": {
"bot_directives": [],
"explicit_ai_bots": [],
"explicit_ai_bot_count": 0,
"wildcard_directive_count": 0,
"wildcard_directives_sample": []
},
"relevant_lines": [
"User-agent: *",
"Sitemap: https://www.mpq.mpg.de/sitemap.xml"
]
},
{
"id": "llms_txt",
"url": "https://www.mpq.mpg.de/llms.txt",
"label": "llms.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 91,
"http_status": 404,
"relevant_lines": []
},
{
"id": "ai_txt",
"url": "https://www.mpq.mpg.de/.well-known/ai.txt",
"label": "AI Policy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 168,
"http_status": 404,
"relevant_lines": []
},
{
"id": "ai_policy_txt",
"url": "https://www.mpq.mpg.de/.well-known/ai-policy.txt",
"label": "AI Policy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 429,
"http_status": 404,
"relevant_lines": []
},
{
"id": "ward_txt",
"url": "https://www.mpq.mpg.de/.well-known/ward.txt",
"label": "WARD Policy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 79,
"http_status": 404,
"relevant_lines": []
}
],
"origin": "https://www.mpq.mpg.de",
"schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 5,
"found_file_count": 1,
"policy_file_count": 0,
"explicit_ai_bot_count": 0
},
"summary": "1 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
"available": true,
"guardrails": [
"Nur feste Same-Origin-Policy-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"known_ai_bots": [
"GPTBot",
"ChatGPT-User",
"Google-Extended",
"ClaudeBot",
"PerplexityBot",
"CCBot"
],
"explicit_ai_bots": [],
"policy_file_count": 0,
"llms_ward_policy_status": "not_publicly_verified",
"robots_ai_policy_status": "robots_found_no_ai_bot_policy"
},
"adtech_transparency_evidence": {
"files": [
{
"id": "ads_txt",
"url": "https://www.mpq.mpg.de/ads.txt",
"label": "ads.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 216,
"http_status": 404,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "app_ads_txt",
"url": "https://www.mpq.mpg.de/app-ads.txt",
"label": "app-ads.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 600,
"http_status": 404,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "sellers_json",
"url": "https://www.mpq.mpg.de/sellers.json",
"label": "sellers.json",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 70,
"http_status": 404,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
}
],
"origin": "https://www.mpq.mpg.de",
"schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 3,
"direct_count": 0,
"reseller_count": 0,
"found_file_count": 0,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"summary": "0 von 3 AdTech-Transparenzdatei(en) gefunden; 0 DIRECT- und 0 RESELLER-Zeile(n).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-AdTech-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status, Zähler und kurze relevante Zeilen"
],
"direct_count": 0,
"ads_txt_found": false,
"reseller_count": 0,
"app_ads_txt_found": false,
"sellers_json_found": false,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"sellers_json_parse_ok": false,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"security_trust_policy_evidence": {
"files": [
{
"id": "security_txt",
"url": "https://www.mpq.mpg.de/.well-known/security.txt",
"label": "security.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 164,
"http_status": 404,
"relevant_lines": [],
"security_txt_policy": []
},
{
"id": "security_txt_legacy",
"url": "https://www.mpq.mpg.de/security.txt",
"label": "security.txt legacy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 86,
"http_status": 404,
"relevant_lines": [],
"security_txt_policy": []
}
],
"origin": "https://www.mpq.mpg.de",
"schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 2,
"field_count": 0,
"contact_count": 0,
"found_file_count": 0,
"preferred_well_known_found": 0
},
"summary": "0 von 2 security.txt-Ziel(en) gefunden; 0 Kontaktfeld(er), 0 strukturierte Feld(er).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-security.txt-Ziele",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"field_count": 0,
"contact_count": 0,
"fields_present": [],
"policy_present": false,
"expires_present": false,
"encryption_present": false,
"security_txt_found": false,
"preferred_well_known_found": false
}
},
"findings": [
{
"id": "pre_consent_tracking_cookies",
"title": "Tracking-Cookies vor Einwilligung gesetzt",
"public": true,
"source": "chromium_cookie_inventory",
"cookies": [
"_pk_id.128.2b69",
"_pk_ses.128.2b69"
],
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"_pk_id.128.2b69",
"_pk_ses.128.2b69"
],
"user_importance": 128,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "imprint_missing",
"title": "Kein Impressum-Link erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"Geprüft in Startseite, Navigation und Footer: kein Impressum-Link gefunden"
],
"user_importance": 125,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "long_lived_tracking_cookie",
"count": 1,
"title": "Langlebige Tracking-/Marketing-Cookies",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"1 im Scan gezählt"
],
"user_importance": 122,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "third_party_page_url_parameter",
"count": 1,
"title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"statistik.mpg.de"
],
"user_importance": 118,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "external_canonical",
"title": "Canonical zeigt auf fremde Domain",
"public": true,
"audience": "nutzer",
"category": "seo",
"severity": "warning",
"canonical_url": "https://www.mpq.mpg.de/",
"evidence_items": [
"https://www.mpq.mpg.de/"
],
"user_importance": 118,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "beacon_api_usage",
"count": 2,
"title": "Beacon-/Keepalive-Telemetrie erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"Beacon-/Keepalive-Telemetrie im Browser-Lauf erkannt"
],
"user_importance": 116,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "operator_contact_missing",
"title": "Keine klare Kontaktmöglichkeit erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"Im geprüften HTML keine Kontaktangabe (E-Mail, Telefon oder Anschrift) erkannt"
],
"user_importance": 116,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "privacy_policy_required_items_missing",
"title": "Datenschutzerklärung deckt zentrale Bausteine nicht vollständig ab",
"public": true,
"missing": [
"Empfänger / Auftragsverarbeiter",
"Drittlandtransfer",
"Stand / Aktualitätsdatum"
],
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"user_importance": 112,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "browser_keystroke_listener_signals",
"count": 7,
"title": "Viele Tastatur-/Eingabe-Listener im Browser erkannt",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"evidence_items": [
"Tastatur-Eingabe-Listener (Session-Replay-nah) im Browser-Lauf erkannt"
],
"user_importance": 110,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "cookie_missing_secure",
"title": "Cookie ohne Secure-Flag",
"public": true,
"cookies": [
"_mpg_session_r"
],
"audience": "nutzer",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"_mpg_session_r"
],
"user_importance": 102,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "sampled_form_privacy_context_missing",
"title": "Formular-Unterseite ohne klaren Datenschutzkontext",
"public": true,
"audience": "nutzer",
"category": "crawl",
"severity": "warning",
"evidence_items": [
"https://www.mpq.mpg.de/1548776/departments"
],
"user_importance": 96,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "privacy_policy_update_date_missing",
"title": "Stand der Datenschutzerklärung nicht klar erkennbar",
"public": true,
"audience": "nutzer",
"category": "privacy",
"severity": "info",
"user_importance": 94,
"importance_label": "Wichtig für Nutzer"
},
{
"id": "missing_hsts",
"title": "HSTS fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "warning",
"evidence_items": [
"HTTP-Header „Strict-Transport-Security\" fehlt in der Antwort der Startseite"
],
"user_importance": 78,
"importance_label": "Technischer Hinweis"
},
{
"id": "csp_missing_object_src",
"title": "CSP ohne object-src",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"evidence_items": [
"Content-Security-Policy ohne object-src-Direktive"
],
"user_importance": 76,
"importance_label": "Technischer Hinweis"
},
{
"id": "csp_missing_base_uri",
"title": "CSP ohne base-uri",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"evidence_items": [
"Content-Security-Policy ohne base-uri-Direktive"
],
"user_importance": 74,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_embedder_policy",
"title": "Cross-Origin-Embedder-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"evidence_items": [
"HTTP-Header „Cross-Origin-Embedder-Policy\" fehlt in der Antwort der Startseite"
],
"user_importance": 68,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_opener_policy",
"title": "Cross-Origin-Opener-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"evidence_items": [
"HTTP-Header „Cross-Origin-Opener-Policy\" fehlt in der Antwort der Startseite"
],
"user_importance": 66,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_cross_origin_resource_policy",
"title": "Cross-Origin-Resource-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"evidence_items": [
"HTTP-Header „Cross-Origin-Resource-Policy\" fehlt in der Antwort der Startseite"
],
"user_importance": 64,
"importance_label": "Technischer Hinweis"
},
{
"id": "consent_banner_dark_pattern_risk",
"count": 1,
"title": "Consent-Banner mit Dark-Pattern-/UX-Risiko",
"public": true,
"audience": "betreiber",
"category": "privacy",
"severity": "warning",
"evidence_items": [
"Banner-UX: Akzeptieren 0 vs. Ablehnen 0 – Ablehnen weniger prominent/gleichwertig"
],
"user_importance": 60,
"importance_label": "Technischer Hinweis"
},
{
"id": "missing_permissions_policy",
"title": "Permissions-Policy fehlt",
"public": true,
"audience": "betreiber",
"category": "security_headers",
"severity": "info",
"evidence_items": [
"HTTP-Header „Permissions-Policy\" fehlt in der Antwort der Startseite"
],
"user_importance": 40,
"importance_label": "Technischer Hinweis"
}
],
"audit_modules": [
{
"id": "privacy_consent",
"color": "red",
"score": 8,
"title": "Datenschutz, Cookies & Consent",
"source": "Browser, HTTP-Header, HTML und Consent-/Cookie-Heuristik",
"status": "kritisch",
"evidence": "0 Tracking-Script(s), 3 Cookie(s) vor Einwilligung, 2 Tracking-Cookie(s), Ablehnen-Option: nein, Consent-Audit: 8."
},
{
"id": "operator_transparency",
"color": "red",
"score": 25,
"title": "Impressum, Kontakt & Datenschutzerklärung",
"source": "Deutschsprachige Betreiber- und Datenschutzhinweis-Erkennung",
"status": "kritisch",
"evidence": "Impressum: nein, Datenschutz: nein, Kontakt: nein."
},
{
"id": "cookie_inventory",
"color": "orange",
"score": 55,
"title": "Cookie-Inventar",
"source": "HTTP-Set-Cookie und Chromium-Cookies beim ersten Seitenaufruf",
"status": "auffällig",
"evidence": "3 Cookie(s), 2 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 1 langlebig, 0 sehr lang."
},
{
"id": "browser_evidence",
"color": "orange",
"score": 69,
"title": "Browser-Nachweis",
"source": "Headless Chromium mit Screenshot- und Request-Telemetrie",
"status": "auffällig",
"evidence": "38 Request(s), 1 Drittanbieter-Domain(s), davon 0 datenschutzrelevant, 3 Browser-Cookie(s), Transfer-Prüfbedarf: 0, Referrer-/URL-Leaks: 1, Fingerprinting-/Replay-Hinweise: 1."
},
{
"id": "security_tls",
"color": "orange",
"score": 70,
"title": "Sicherheit, TLS & Header",
"source": "DNS, TLS, HTTP-Status, Zertifikat und Security-Header",
"status": "auffällig",
"evidence": "2 Infrastruktur-Hinweis(e), Security-Header: 4/9 vorhanden, 5 fehlen, externe Skript-Hosts: 0."
},
{
"id": "seo_integrity",
"color": "yellow",
"score": 82,
"title": "SEO-Integrität & Cloaking",
"source": "HTML-Inhalt, strukturierte Daten, Links und Googlebot-Vergleich",
"status": "prüfen",
"evidence": "1 SEO-Spam-Hinweis(e), 0 Cloaking-Hinweis(e)."
},
{
"id": "tracking_pixels_beacons",
"color": "yellow",
"score": 82,
"title": "Tracking-Pixel & Beacons",
"source": "HTML-Pixel, Link-Ping-Attribute, Chromium-Requests und Browser-API-Instrumentierung",
"status": "prüfen",
"evidence": "0 Pixel-/Bildtracking-Hinweis(e), 2 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s)."
},
{
"id": "forms_payments",
"color": "yellow",
"score": 84,
"title": "Formulare, Login & Zahlung",
"source": "HTML-Formulare, Eingabefelder, Zahlungsanbieter und Kontextlinks",
"status": "prüfen",
"evidence": "Aus diesem Rohfeld wird im Report keine zusätzliche Scan-Feststellung abgeleitet; Betreiberkontext und Umsetzungshinweise stehen auf separaten Seiten."
},
{
"id": "site_coverage",
"color": "yellow",
"score": 84,
"title": "Seitenabdeckung & Crawl",
"source": "Startseiten-Links, Compliance-Links und begrenzter interner Zusatzabruf",
"status": "prüfen",
"evidence": "30 interne Linkziele erkannt, 4 priorisierte Unterseite(n) abgerufen."
},
{
"id": "referrer_url_leaks",
"color": "yellow",
"score": 88,
"title": "Referrer & URL-Leaks",
"source": "Chromium-Request-Telemetrie ohne gespeicherte Parameterwerte",
"status": "prüfen",
"evidence": "1 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 0 sensible Query-Kontexte."
},
{
"id": "accessibility_usability",
"color": "green",
"score": 92,
"title": "Barrierefreiheit & Usability",
"source": "Passives HTML-Sample: Bilder, Formulare, Buttons, Sprache, Headings und Viewport",
"status": "unauffällig",
"evidence": "0 Bild(er) ohne alt, 0 Formularfeld(er) ohne Beschriftung, 0 Button(s) ohne Namen."
},
{
"id": "consent_journey",
"color": "green",
"score": 100,
"title": "Consent-Journey-Matrix",
"source": "Chromium-Zustände: Erstaufruf, Reject, Accept und GPC",
"status": "unauffällig",
"evidence": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 0 im GPC-Aufruf."
},
{
"id": "embedded_content",
"color": "green",
"score": 100,
"title": "Externe Inhalte & Widgets",
"source": "HTML-Embeds und Chromium-Drittanbieter-Requests",
"status": "unauffällig",
"evidence": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen."
},
{
"id": "script_supply_chain",
"color": "green",
"score": 100,
"title": "Externe Skripte & SRI",
"source": "HTML-Script-Tags, Anbieterklassifikation und SRI-Attribute",
"status": "unauffällig",
"evidence": "0 externe Skript(e) von 0 Host(s), 0 ohne SRI, 0 Tracking-/Tag-nahe Skript(e)."
},
{
"id": "google_third_parties",
"color": "green",
"score": 100,
"title": "Google-Dienste & Drittanbieter",
"source": "Chromium-Requests, Anbieterklassifikation und Google Consent Mode Heuristik",
"status": "unauffällig",
"evidence": "Keine Google-Domain, keine Google-Tracking-ID und keine datenschutzrelevanten Drittanbieter im passiven Check erkannt."
},
{
"id": "pii_exposure",
"color": "green",
"score": 100,
"title": "PII, URL-Parameter & Datenleck-Schutz",
"source": "URL-Parameter, interne Links, HTML-Formulare, Browser-Drittanbieter und Dateneingabe-Kontext",
"status": "unauffällig",
"evidence": "0 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext."
},
{
"id": "performance_mobile",
"color": "green",
"score": 100,
"title": "Performance & mobile Nutzbarkeit",
"source": "HTTP-Antwort, HTML-Größe, Komprimierung und mobile Basis",
"status": "unauffällig",
"evidence": "Performance-Score 100, Antwortzeit 233 ms."
}
],
"ai_search_policy_evidence": {
"files": [
{
"id": "robots_txt",
"url": "https://www.mpq.mpg.de/robots.txt",
"label": "robots.txt",
"reason": "",
"status": "found",
"body_size": 91,
"truncated": false,
"body_sha256": "0430a3a4bf3fc6449ecca48e34a4938b11bd2419fab62b972d37f0ec4c188090",
"duration_ms": 187,
"http_status": 200,
"ai_bot_policy": {
"bot_directives": [],
"explicit_ai_bots": [],
"explicit_ai_bot_count": 0,
"wildcard_directive_count": 0,
"wildcard_directives_sample": []
},
"relevant_lines": [
"User-agent: *",
"Sitemap: https://www.mpq.mpg.de/sitemap.xml"
]
},
{
"id": "llms_txt",
"url": "https://www.mpq.mpg.de/llms.txt",
"label": "llms.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 91,
"http_status": 404,
"relevant_lines": []
},
{
"id": "ai_txt",
"url": "https://www.mpq.mpg.de/.well-known/ai.txt",
"label": "AI Policy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 168,
"http_status": 404,
"relevant_lines": []
},
{
"id": "ai_policy_txt",
"url": "https://www.mpq.mpg.de/.well-known/ai-policy.txt",
"label": "AI Policy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 429,
"http_status": 404,
"relevant_lines": []
},
{
"id": "ward_txt",
"url": "https://www.mpq.mpg.de/.well-known/ward.txt",
"label": "WARD Policy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 79,
"http_status": 404,
"relevant_lines": []
}
],
"origin": "https://www.mpq.mpg.de",
"schema": "https://saferpage.de/schemas/ai-search-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 5,
"found_file_count": 1,
"policy_file_count": 0,
"explicit_ai_bot_count": 0
},
"summary": "1 von 5 Policy-Datei(en) gefunden; 0 explizite KI-Bot-Regel(n) in robots.txt.",
"available": true,
"guardrails": [
"Nur feste Same-Origin-Policy-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"known_ai_bots": [
"GPTBot",
"ChatGPT-User",
"Google-Extended",
"ClaudeBot",
"PerplexityBot",
"CCBot"
],
"explicit_ai_bots": [],
"policy_file_count": 0,
"llms_ward_policy_status": "not_publicly_verified",
"robots_ai_policy_status": "robots_found_no_ai_bot_policy"
},
"adtech_transparency_evidence": {
"files": [
{
"id": "ads_txt",
"url": "https://www.mpq.mpg.de/ads.txt",
"label": "ads.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 216,
"http_status": 404,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "app_ads_txt",
"url": "https://www.mpq.mpg.de/app-ads.txt",
"label": "app-ads.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 600,
"http_status": 404,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
},
{
"id": "sellers_json",
"url": "https://www.mpq.mpg.de/sellers.json",
"label": "sellers.json",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 70,
"http_status": 404,
"ads_txt_policy": [],
"relevant_lines": [],
"sellers_json_policy": []
}
],
"origin": "https://www.mpq.mpg.de",
"schema": "https://saferpage.de/schemas/adtech-transparency-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 3,
"direct_count": 0,
"reseller_count": 0,
"found_file_count": 0,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"summary": "0 von 3 AdTech-Transparenzdatei(en) gefunden; 0 DIRECT- und 0 RESELLER-Zeile(n).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-AdTech-Dateien",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status, Zähler und kurze relevante Zeilen"
],
"direct_count": 0,
"ads_txt_found": false,
"reseller_count": 0,
"app_ads_txt_found": false,
"sellers_json_found": false,
"ads_txt_entry_count": 0,
"exchange_domain_count": 0,
"sellers_json_parse_ok": false,
"app_ads_txt_entry_count": 0,
"sellers_json_seller_count": 0
},
"security_trust_policy_evidence": {
"files": [
{
"id": "security_txt",
"url": "https://www.mpq.mpg.de/.well-known/security.txt",
"label": "security.txt",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 164,
"http_status": 404,
"relevant_lines": [],
"security_txt_policy": []
},
{
"id": "security_txt_legacy",
"url": "https://www.mpq.mpg.de/security.txt",
"label": "security.txt legacy",
"reason": "http_error",
"status": "missing",
"body_size": 0,
"truncated": false,
"body_sha256": "",
"duration_ms": 86,
"http_status": 404,
"relevant_lines": [],
"security_txt_policy": []
}
],
"origin": "https://www.mpq.mpg.de",
"schema": "https://saferpage.de/schemas/security-trust-policy-evidence.v1",
"status": "checked",
"metrics": {
"file_count": 2,
"field_count": 0,
"contact_count": 0,
"found_file_count": 0,
"preferred_well_known_found": 0
},
"summary": "0 von 2 security.txt-Ziel(en) gefunden; 0 Kontaktfeld(er), 0 strukturierte Feld(er).",
"available": true,
"guardrails": [
"Nur feste Same-Origin-security.txt-Ziele",
"Keine Off-Host-Redirects",
"64-KB-Body-Limit",
"Öffentlich nur Hash, Status und kurze relevante Zeilen"
],
"field_count": 0,
"contact_count": 0,
"fields_present": [],
"policy_present": false,
"expires_present": false,
"encryption_present": false,
"security_txt_found": false,
"preferred_well_known_found": false
},
"site_coverage_analysis": {
"color": "yellow",
"pages": [
{
"url": "https://www.mpq.mpg.de/5279080/datenschutz",
"path": "/5279080/datenschutz",
"text": "Datenschutzhinweis",
"source": "browser_rendered_link",
"via_url": "https://www.mpq.mpg.de/",
"category": "datenschutz",
"priority": 108,
"click_depth": 1,
"rendered_visible": false,
"reachability_source": "browser_rendered_link"
},
{
"url": "https://www.mpq.mpg.de/2384/imprint",
"path": "/2384/imprint",
"text": "Impressum",
"source": "browser_rendered_link",
"via_url": "https://www.mpq.mpg.de/",
"category": "impressum",
"priority": 104,
"click_depth": 1,
"rendered_visible": false,
"reachability_source": "browser_rendered_link"
},
{
"url": "https://www.mpq.mpg.de/2378/contact",
"path": "/2378/contact",
"text": "Kontakt",
"source": "browser_rendered_link",
"via_url": "https://www.mpq.mpg.de/",
"category": "kontakt",
"priority": 98,
"click_depth": 1,
"rendered_visible": false,
"reachability_source": "browser_rendered_link"
},
{
"url": "https://www.mpq.mpg.de/1548776/departments",
"path": "/1548776/departments",
"text": "Abteilungen",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/1548788/research_groups",
"path": "/1548788/research_groups",
"text": "Unabhängige Forschungsgruppen",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/1548824/res_schools",
"path": "/1548824/res_schools",
"text": "Research Schools",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/1548848/publications",
"path": "/1548848/publications",
"text": "Publikationen",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/2153673/quanten",
"path": "/2153673/quanten",
"text": "Quantendynamik",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/3673404/profil",
"path": "/3673404/profil",
"text": "Wissenschaftliches Profil",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/4017109/history",
"path": "/4017109/history",
"text": "Geschichte",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/4018390/structure",
"path": "/4018390/structure",
"text": "Struktur",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
},
{
"url": "https://www.mpq.mpg.de/4018442/service",
"path": "/4018442/service",
"text": "Service-Gruppen",
"source": "homepage_link+sitemap",
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"priority": 24,
"click_depth": 1,
"reachability_source": "homepage_link"
}
],
"score": 84,
"status": "prüfen",
"summary": "30 interne Linkziele erkannt (120 aus Sitemap), 4 priorisierte Unterseite(n) zusätzlich abgerufen.",
"findings": [
{
"id": "sampled_form_privacy_context_missing",
"title": "Formular-Unterseite ohne klaren Datenschutzkontext",
"public": true,
"category": "crawl",
"severity": "warning"
},
{
"id": "privacy_policy_required_items_missing",
"title": "Datenschutzerklärung deckt zentrale Bausteine nicht vollständig ab",
"public": true,
"missing": [
"Empfänger / Auftragsverarbeiter",
"Drittlandtransfer",
"Stand / Aktualitätsdatum"
],
"category": "privacy",
"severity": "warning"
},
{
"id": "privacy_policy_update_date_missing",
"title": "Stand der Datenschutzerklärung nicht klar erkennbar",
"public": true,
"category": "privacy",
"severity": "info"
}
],
"robots_ok": true,
"categories": {
"kontakt": 1,
"impressum": 1,
"unterseite": 27,
"datenschutz": 1
},
"sample_limit": 4,
"imprint_audit": {
"url": "https://www.mpq.mpg.de/2384/imprint",
"color": "yellow",
"found": [
"Betreibername oder Anbieter",
"ladungsfähige Anschrift",
"schneller elektronischer Kontakt",
"Vertretungsberechtigte / Inhaber",
"Registerangaben"
],
"score": 88,
"checks": [
{
"id": "operator_identity",
"found": true,
"label": "Betreibername oder Anbieter",
"evidence": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des"
]
},
{
"id": "postal_address",
"found": true,
"label": "ladungsfähige Anschrift",
"evidence": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8"
]
},
{
"id": "electronic_contact",
"found": true,
"label": "schneller elektronischer Kontakt",
"evidence": [
"+49 (89) 2108",
"+49 - 89 / 3 29 05 -602"
]
},
{
"id": "representative",
"found": true,
"label": "Vertretungsberechtigte / Inhaber",
"evidence": [
"vertreten durch den Vereinsvorstand, und dieser wiederum durch den Präsidenten, Prof",
"Verantwortliche"
],
"optional": true
},
{
"id": "register",
"found": true,
"label": "Registerangaben",
"evidence": [
"Vereinsregister",
"Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Registernummer VR 13378 B eingetragen"
],
"optional": true
},
{
"id": "vat_id",
"found": false,
"label": "USt-IdNr. / Wirtschafts-ID",
"evidence": [],
"optional": true
},
{
"id": "mstv_responsible",
"found": false,
"label": "§ 18 Abs. 2 MStV / Inhaltsverantwortung",
"evidence": [],
"optional": true
},
{
"id": "supervisory_authority",
"found": false,
"label": "Aufsichtsbehörde / Kammer",
"evidence": [],
"optional": true
},
{
"id": "professional_rules",
"found": false,
"label": "Berufsrechtliche Angaben",
"evidence": [],
"optional": true
},
{
"id": "illegal_content_contact",
"found": false,
"label": "Kontaktweg für rechtswidrige Inhalte / DSA",
"evidence": [],
"optional": true
}
],
"emails": [],
"phones": [
"+49 (89) 2108",
"+49 - 89 / 3 29 05 -602",
"+49 - 89 / 3 29 05 -649"
],
"status": "prüfen",
"missing": [
"USt-IdNr. / Wirtschafts-ID",
"§ 18 Abs. 2 MStV / Inhaltsverantwortung",
"Aufsichtsbehörde / Kammer",
"Berufsrechtliche Angaben",
"Kontaktweg für rechtswidrige Inhalte / DSA"
],
"summary": "3 von 3 zentralen Impressumsfeldern erkannt; Erkennung hoch.",
"vat_ids": [],
"findings": [],
"available": true,
"tel_links": [],
"confidence": "hoch",
"field_count": 5,
"mailto_links": [],
"reachability": {
"url": "https://www.mpq.mpg.de/2384/imprint",
"label": "Impressum ist direkt von der Startseite erreichbar.",
"source": "browser_rendered_link",
"status": "direct",
"via_url": "https://www.mpq.mpg.de/",
"available": true,
"click_depth": 1,
"directly_linked": true,
"within_two_clicks": true
},
"missing_count": 0,
"mstv_contexts": [],
"person_candidates": [
"Vereinsvorstand"
],
"register_contexts": [
"Vereinsregister",
"Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Registernummer VR 13378 B eingetragen"
],
"address_candidates": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8",
"80539 München"
],
"contact_form_found": true,
"operator_candidates": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des",
"Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"Vereinsvorstand"
],
"required_field_count": 3,
"required_found_count": 3,
"supervisory_contexts": [],
"professional_contexts": [],
"illegal_content_emails": [],
"postal_city_candidates": [
"80539 München"
],
"public_authority_found": false,
"organization_candidates": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des",
"Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V"
],
"representative_contexts": [
"vertreten durch den Vereinsvorstand, und dieser wiederum durch den Präsidenten, Prof",
"Verantwortliche",
"verantwortliche für die Internetpräsenz des Max-Planck-Instituts für Quantenoptik ( https://www",
"verantwortlich",
"Verantwortlichkeit ausgelöst wird"
],
"illegal_content_contexts": [],
"street_address_candidates": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8"
],
"legal_form_requires_register": true,
"illegal_content_contact_found": false
},
"sampled_count": 4,
"sampled_pages": [
{
"ok": true,
"url": "https://www.mpq.mpg.de/5279080/datenschutz",
"path": "/5279080/datenschutz",
"audit": {
"form_count": 2,
"finding_ids": [
"cookie_missing_secure",
"consent_no_reject_option"
],
"cookie_count": 1,
"imprint_audit": [],
"imprint_found": true,
"consent_hint_found": true,
"reject_option_found": false,
"privacy_policy_found": true,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 2,
"title": "Datenschutz | Max-Planck-Institut für Quantenoptik",
"source": "browser_rendered_link",
"status": 200,
"via_url": "https://www.mpq.mpg.de/",
"category": "datenschutz",
"click_depth": 1,
"duration_ms": 341,
"privacy_hint": true,
"imprint_audit": [],
"rendered_content": false,
"privacy_policy_audit": {
"url": "https://www.mpq.mpg.de/5279080/datenschutz",
"color": "yellow",
"found": [
"Verantwortlicher / Anbieter",
"Kontakt / Datenschutzkontakt",
"Zwecke der Verarbeitung",
"Rechtsgrundlagen",
"Betroffenenrechte",
"Speicherfrist / Löschung",
"Cookies / Tracking",
"Widerruf / Opt-out",
"Beschwerde bei Aufsichtsbehörde",
"Datenschutzkontakt / DPO-Hinweis",
"Verständliche Satzlänge"
],
"score": 79,
"checks": [
{
"id": "controller_identity",
"found": true,
"label": "Verantwortlicher / Anbieter"
},
{
"id": "contact",
"found": true,
"label": "Kontakt / Datenschutzkontakt"
},
{
"id": "purposes",
"found": true,
"label": "Zwecke der Verarbeitung"
},
{
"id": "legal_basis",
"found": true,
"label": "Rechtsgrundlagen"
},
{
"id": "rights",
"found": true,
"label": "Betroffenenrechte"
},
{
"id": "retention",
"found": true,
"label": "Speicherfrist / Löschung"
},
{
"id": "recipients",
"found": false,
"label": "Empfänger / Auftragsverarbeiter"
},
{
"id": "cookies_tracking",
"found": true,
"label": "Cookies / Tracking"
},
{
"id": "withdrawal",
"found": true,
"label": "Widerruf / Opt-out"
},
{
"id": "complaint_authority",
"found": true,
"label": "Beschwerde bei Aufsichtsbehörde"
},
{
"id": "third_country_transfer",
"found": false,
"label": "Drittlandtransfer"
},
{
"id": "update_date",
"found": false,
"label": "Stand / Aktualitätsdatum",
"detail": ""
},
{
"id": "dpo_contact",
"found": true,
"label": "Datenschutzkontakt / DPO-Hinweis"
},
{
"id": "readability",
"found": true,
"label": "Verständliche Satzlänge",
"detail": "11.6 Wörter/Satz"
}
],
"status": "prüfen",
"missing": [
"Empfänger / Auftragsverarbeiter",
"Drittlandtransfer",
"Stand / Aktualitätsdatum"
],
"summary": "11 von 14 zentralen Datenschutz-Bausteinen erkannt.",
"findings": [
{
"id": "privacy_policy_update_date_missing",
"title": "Stand der Datenschutzerklärung nicht klar erkennbar",
"public": true,
"category": "privacy",
"severity": "info"
}
],
"available": true,
"freshness": {
"stale": false,
"age_days": null,
"last_updated": "",
"update_date_found": false
},
"word_count": 2134,
"readability": {
"hard_to_read": false,
"sentence_count": 184,
"avg_sentence_words": 11.6
},
"missing_count": 3,
"dpo_contact_found": true
}
},
{
"ok": true,
"url": "https://www.mpq.mpg.de/2384/imprint",
"path": "/2384/imprint",
"audit": {
"form_count": 2,
"finding_ids": [
"cookie_missing_secure",
"privacy_policy_too_thin"
],
"cookie_count": 1,
"imprint_audit": {
"url": "",
"color": "yellow",
"found": [
"Betreibername oder Anbieter",
"ladungsfähige Anschrift",
"schneller elektronischer Kontakt",
"Vertretungsberechtigte / Inhaber",
"Registerangaben"
],
"score": 88,
"checks": [
{
"id": "operator_identity",
"found": true,
"label": "Betreibername oder Anbieter",
"evidence": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des"
]
},
{
"id": "postal_address",
"found": true,
"label": "ladungsfähige Anschrift",
"evidence": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8"
]
},
{
"id": "electronic_contact",
"found": true,
"label": "schneller elektronischer Kontakt",
"evidence": [
"+49 (89) 2108",
"+49 - 89 / 3 29 05 -602"
]
},
{
"id": "representative",
"found": true,
"label": "Vertretungsberechtigte / Inhaber",
"evidence": [
"vertreten durch den Vereinsvorstand, und dieser wiederum durch den Präsidenten, Prof",
"Verantwortliche"
],
"optional": true
},
{
"id": "register",
"found": true,
"label": "Registerangaben",
"evidence": [
"Vereinsregister",
"Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Registernummer VR 13378 B eingetragen"
],
"optional": true
},
{
"id": "vat_id",
"found": false,
"label": "USt-IdNr. / Wirtschafts-ID",
"evidence": [],
"optional": true
},
{
"id": "mstv_responsible",
"found": false,
"label": "§ 18 Abs. 2 MStV / Inhaltsverantwortung",
"evidence": [],
"optional": true
},
{
"id": "supervisory_authority",
"found": false,
"label": "Aufsichtsbehörde / Kammer",
"evidence": [],
"optional": true
},
{
"id": "professional_rules",
"found": false,
"label": "Berufsrechtliche Angaben",
"evidence": [],
"optional": true
},
{
"id": "illegal_content_contact",
"found": false,
"label": "Kontaktweg für rechtswidrige Inhalte / DSA",
"evidence": [],
"optional": true
}
],
"emails": [],
"phones": [
"+49 (89) 2108",
"+49 - 89 / 3 29 05 -602",
"+49 - 89 / 3 29 05 -649"
],
"status": "prüfen",
"missing": [
"USt-IdNr. / Wirtschafts-ID",
"§ 18 Abs. 2 MStV / Inhaltsverantwortung",
"Aufsichtsbehörde / Kammer",
"Berufsrechtliche Angaben",
"Kontaktweg für rechtswidrige Inhalte / DSA"
],
"summary": "3 von 3 zentralen Impressumsfeldern erkannt; Erkennung hoch.",
"vat_ids": [],
"findings": [],
"available": true,
"tel_links": [],
"confidence": "hoch",
"field_count": 5,
"mailto_links": [],
"missing_count": 0,
"mstv_contexts": [],
"person_candidates": [
"Vereinsvorstand"
],
"register_contexts": [
"Vereinsregister",
"Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Registernummer VR 13378 B eingetragen"
],
"address_candidates": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8",
"80539 München"
],
"contact_form_found": true,
"operator_candidates": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des",
"Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"Vereinsvorstand"
],
"required_field_count": 3,
"required_found_count": 3,
"supervisory_contexts": [],
"professional_contexts": [],
"illegal_content_emails": [],
"postal_city_candidates": [
"80539 München"
],
"public_authority_found": false,
"organization_candidates": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des",
"Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V"
],
"representative_contexts": [
"vertreten durch den Vereinsvorstand, und dieser wiederum durch den Präsidenten, Prof",
"Verantwortliche",
"verantwortliche für die Internetpräsenz des Max-Planck-Instituts für Quantenoptik ( https://www",
"verantwortlich",
"Verantwortlichkeit ausgelöst wird"
],
"illegal_content_contexts": [],
"street_address_candidates": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8"
],
"legal_form_requires_register": true,
"illegal_content_contact_found": false
},
"imprint_found": true,
"consent_hint_found": false,
"reject_option_found": false,
"privacy_policy_found": true,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 2,
"title": "Impressum | Max-Planck-Institut für Quantenoptik",
"source": "browser_rendered_link",
"status": 200,
"via_url": "https://www.mpq.mpg.de/",
"category": "impressum",
"click_depth": 1,
"duration_ms": 486,
"privacy_hint": true,
"imprint_audit": {
"url": "https://www.mpq.mpg.de/2384/imprint",
"color": "yellow",
"found": [
"Betreibername oder Anbieter",
"ladungsfähige Anschrift",
"schneller elektronischer Kontakt",
"Vertretungsberechtigte / Inhaber",
"Registerangaben"
],
"score": 88,
"checks": [
{
"id": "operator_identity",
"found": true,
"label": "Betreibername oder Anbieter",
"evidence": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des"
]
},
{
"id": "postal_address",
"found": true,
"label": "ladungsfähige Anschrift",
"evidence": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8"
]
},
{
"id": "electronic_contact",
"found": true,
"label": "schneller elektronischer Kontakt",
"evidence": [
"+49 (89) 2108",
"+49 - 89 / 3 29 05 -602"
]
},
{
"id": "representative",
"found": true,
"label": "Vertretungsberechtigte / Inhaber",
"evidence": [
"vertreten durch den Vereinsvorstand, und dieser wiederum durch den Präsidenten, Prof",
"Verantwortliche"
],
"optional": true
},
{
"id": "register",
"found": true,
"label": "Registerangaben",
"evidence": [
"Vereinsregister",
"Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Registernummer VR 13378 B eingetragen"
],
"optional": true
},
{
"id": "vat_id",
"found": false,
"label": "USt-IdNr. / Wirtschafts-ID",
"evidence": [],
"optional": true
},
{
"id": "mstv_responsible",
"found": false,
"label": "§ 18 Abs. 2 MStV / Inhaltsverantwortung",
"evidence": [],
"optional": true
},
{
"id": "supervisory_authority",
"found": false,
"label": "Aufsichtsbehörde / Kammer",
"evidence": [],
"optional": true
},
{
"id": "professional_rules",
"found": false,
"label": "Berufsrechtliche Angaben",
"evidence": [],
"optional": true
},
{
"id": "illegal_content_contact",
"found": false,
"label": "Kontaktweg für rechtswidrige Inhalte / DSA",
"evidence": [],
"optional": true
}
],
"emails": [],
"phones": [
"+49 (89) 2108",
"+49 - 89 / 3 29 05 -602",
"+49 - 89 / 3 29 05 -649"
],
"status": "prüfen",
"missing": [
"USt-IdNr. / Wirtschafts-ID",
"§ 18 Abs. 2 MStV / Inhaltsverantwortung",
"Aufsichtsbehörde / Kammer",
"Berufsrechtliche Angaben",
"Kontaktweg für rechtswidrige Inhalte / DSA"
],
"summary": "3 von 3 zentralen Impressumsfeldern erkannt; Erkennung hoch.",
"vat_ids": [],
"findings": [],
"available": true,
"tel_links": [],
"confidence": "hoch",
"field_count": 5,
"mailto_links": [],
"reachability": {
"url": "https://www.mpq.mpg.de/2384/imprint",
"label": "Impressum ist direkt von der Startseite erreichbar.",
"source": "browser_rendered_link",
"status": "direct",
"via_url": "https://www.mpq.mpg.de/",
"available": true,
"click_depth": 1,
"directly_linked": true,
"within_two_clicks": true
},
"missing_count": 0,
"mstv_contexts": [],
"person_candidates": [
"Vereinsvorstand"
],
"register_contexts": [
"Vereinsregister",
"Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Registernummer VR 13378 B eingetragen"
],
"address_candidates": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8",
"80539 München"
],
"contact_form_found": true,
"operator_candidates": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des",
"Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"Vereinsvorstand"
],
"required_field_count": 3,
"required_found_count": 3,
"supervisory_contexts": [],
"professional_contexts": [],
"illegal_content_emails": [],
"postal_city_candidates": [
"80539 München"
],
"public_authority_found": false,
"organization_candidates": [
"Die Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V",
"dieser Internetpräsenz des",
"Max-Planck-Gesellschaft zur Förderung der Wissenschaften e.V"
],
"representative_contexts": [
"vertreten durch den Vereinsvorstand, und dieser wiederum durch den Präsidenten, Prof",
"Verantwortliche",
"verantwortliche für die Internetpräsenz des Max-Planck-Instituts für Quantenoptik ( https://www",
"verantwortlich",
"Verantwortlichkeit ausgelöst wird"
],
"illegal_content_contexts": [],
"street_address_candidates": [
"Hofgartenstraße 8 80539 München",
"Hofgartenstraße 8"
],
"legal_form_requires_register": true,
"illegal_content_contact_found": false
},
"rendered_content": false,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://www.mpq.mpg.de/2378/contact",
"path": "/2378/contact",
"audit": {
"form_count": 2,
"finding_ids": [
"cookie_missing_secure",
"operator_identity_unclear",
"privacy_policy_too_thin"
],
"cookie_count": 1,
"imprint_audit": [],
"imprint_found": true,
"consent_hint_found": false,
"reject_option_found": false,
"privacy_policy_found": true,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 2,
"title": "Kontakt | Max-Planck-Institut für Quantenoptik",
"source": "browser_rendered_link",
"status": 200,
"via_url": "https://www.mpq.mpg.de/",
"category": "kontakt",
"click_depth": 1,
"duration_ms": 529,
"privacy_hint": true,
"imprint_audit": [],
"rendered_content": false,
"privacy_policy_audit": []
},
{
"ok": true,
"url": "https://www.mpq.mpg.de/1548776/departments",
"path": "/1548776/departments",
"audit": {
"form_count": 2,
"finding_ids": [
"cookie_missing_secure",
"imprint_missing",
"operator_contact_missing"
],
"cookie_count": 1,
"imprint_audit": [],
"imprint_found": false,
"consent_hint_found": false,
"reject_option_found": false,
"privacy_policy_found": false,
"tracking_script_count": 0,
"pre_consent_cookie_count": 1,
"pre_consent_tracking_cookie_count": 0
},
"forms": 2,
"title": "Abteilungen | Max-Planck-Institut für Quantenoptik",
"source": "homepage_link+sitemap",
"status": 200,
"via_url": "https://www.mpq.mpg.de/",
"category": "unterseite",
"click_depth": 1,
"duration_ms": 809,
"privacy_hint": false,
"imprint_audit": [],
"rendered_content": false,
"privacy_policy_audit": []
}
],
"robots_checked": true,
"sitemap_sources": [
"https://www.mpq.mpg.de/sitemap.xml",
"https://www.mpq.mpg.de/2372/sitemap.xml",
"https://www.mpq.mpg.de/2390/sitemap.xml",
"https://www.mpq.mpg.de/sitemap-mainmenu-de.xml",
"https://www.mpq.mpg.de/sitemap-mainmenu-en.xml"
],
"sitemap_available": true,
"sitemap_url_count": 120,
"homepage_link_count": 75,
"internal_link_count": 30,
"imprint_reachability": {
"url": "https://www.mpq.mpg.de/2384/imprint",
"label": "Impressum ist direkt von der Startseite erreichbar.",
"source": "browser_rendered_link",
"status": "direct",
"via_url": "https://www.mpq.mpg.de/",
"available": true,
"click_depth": 1,
"directly_linked": true,
"within_two_clicks": true
},
"privacy_policy_audit": {
"url": "https://www.mpq.mpg.de/5279080/datenschutz",
"color": "yellow",
"found": [
"Verantwortlicher / Anbieter",
"Kontakt / Datenschutzkontakt",
"Zwecke der Verarbeitung",
"Rechtsgrundlagen",
"Betroffenenrechte",
"Speicherfrist / Löschung",
"Cookies / Tracking",
"Widerruf / Opt-out",
"Beschwerde bei Aufsichtsbehörde",
"Datenschutzkontakt / DPO-Hinweis",
"Verständliche Satzlänge"
],
"score": 79,
"checks": [
{
"id": "controller_identity",
"found": true,
"label": "Verantwortlicher / Anbieter"
},
{
"id": "contact",
"found": true,
"label": "Kontakt / Datenschutzkontakt"
},
{
"id": "purposes",
"found": true,
"label": "Zwecke der Verarbeitung"
},
{
"id": "legal_basis",
"found": true,
"label": "Rechtsgrundlagen"
},
{
"id": "rights",
"found": true,
"label": "Betroffenenrechte"
},
{
"id": "retention",
"found": true,
"label": "Speicherfrist / Löschung"
},
{
"id": "recipients",
"found": false,
"label": "Empfänger / Auftragsverarbeiter"
},
{
"id": "cookies_tracking",
"found": true,
"label": "Cookies / Tracking"
},
{
"id": "withdrawal",
"found": true,
"label": "Widerruf / Opt-out"
},
{
"id": "complaint_authority",
"found": true,
"label": "Beschwerde bei Aufsichtsbehörde"
},
{
"id": "third_country_transfer",
"found": false,
"label": "Drittlandtransfer"
},
{
"id": "update_date",
"found": false,
"label": "Stand / Aktualitätsdatum",
"detail": ""
},
{
"id": "dpo_contact",
"found": true,
"label": "Datenschutzkontakt / DPO-Hinweis"
},
{
"id": "readability",
"found": true,
"label": "Verständliche Satzlänge",
"detail": "11.6 Wörter/Satz"
}
],
"status": "prüfen",
"missing": [
"Empfänger / Auftragsverarbeiter",
"Drittlandtransfer",
"Stand / Aktualitätsdatum"
],
"summary": "11 von 14 zentralen Datenschutz-Bausteinen erkannt.",
"findings": [
{
"id": "privacy_policy_update_date_missing",
"title": "Stand der Datenschutzerklärung nicht klar erkennbar",
"public": true,
"category": "privacy",
"severity": "info"
}
],
"available": true,
"freshness": {
"stale": false,
"age_days": null,
"last_updated": "",
"update_date_found": false
},
"word_count": 2134,
"readability": {
"hard_to_read": false,
"sentence_count": 184,
"avg_sentence_words": 11.6
},
"missing_count": 3,
"dpo_contact_found": true
},
"sitemap_source_count": 5,
"provider_disclosure_audit": {
"color": "green",
"found": [
"Matomo"
],
"score": 100,
"checks": [
{
"id": "analytics_matomo",
"found": true,
"category": "analytics",
"evidence": [
"_pk_id.128.2b69",
"_pk_ses.128.2b69"
],
"keywords": [
"matomo",
"piwik"
],
"provider": "Matomo",
"category_label": "Analytics"
}
],
"status": "unauffällig",
"missing": [],
"summary": "1 von 1 technisch erkannten Anbieter(n) wurden in der Datenschutzerklärung erwähnt.",
"available": true,
"missing_count": 0,
"detected_count": 1,
"mentioned_count": 1
},
"important_categories_found": [
"datenschutz",
"impressum",
"kontakt"
],
"sampled_tracking_page_count": 0,
"internal_discovery_link_count": 0,
"sampled_form_privacy_gap_count": 1,
"sitemap_candidate_source_count": 1
},
"page_analysis": {
"h1": [],
"h2": [
"Pioniere der Quantenoptik",
"Unser Bildungsauftrag",
"Smart, unterschiedlich und sympathisch",
"Eine exzellente Umgebung",
"Pforten zu einer neuen Physik",
"Ein Nobelpreis für die Attosekunde!"
],
"title": "Startseite | Max-Planck-Institut für Quantenoptik",
"keywords": [
[
"quantenoptik",
7
],
[
"sind",
5
],
[
"max-planck-institut",
4
],
[
"physik",
4
],
[
"unser",
4
],
[
"stellen",
4
],
[
"unsere",
4
],
[
"natur",
3
],
[
"phänomene",
3
],
[
"neuen",
3
]
],
"language": "de",
"description": "Im Max-Planck-Institut für Quantenoptik erforschen Physikerinnen und Physiker zwei Grundfesten der Natur: Materie und Licht, und wie diese auf der kleinsten Ebene von Atomen, Molekülen und Photonen wechselwirken. Dafür erschaffen sie extreme Bedingungen, wie die kältesten Temperaturen im Universum oder die mitunter kürzesten uns bekannten Lichtpulse. Mithilfe höchstmoderner Experimente eröffnen Forschende den Blick auf außergewöhnliche, teilweise hoch rätselhafte quantenmechanische Phänomene. Sind sie Vorboten einer neuen Physik, die unser Grundverständnis der Natur auf den Kopf stellen? Können sie uns helfen, die Hochtechnologien der Zukunft zu entwerfen und damit die drängendsten Probleme der Gegenwart lösen?",
"favicon_url": "https://www.mpq.mpg.de/assets/touch-icon-180x180-a3e396f9294afe6618861344bef35fc0075f9631fe80702eb259befcd682a42c.png",
"link_counts": {
"external": 0,
"internal": 75
},
"preview_image": "/cache/screenshots/mpq.mpg.de-160x150-1b7603ced554d0b29d.png",
"screenshot_url": "/cache/screenshots/mpq.mpg.de-160x150-1b7603ced554d0b29d.png",
"external_scripts": [],
"browser_final_url": "https://www.mpq.mpg.de/",
"meta_preview_image": "https://www.mpq.mpg.de/assets/og-logo-281c44f14f2114ed3fe50e666618ff96341055a2f8ce31aa0fd70471a30ca9ed.jpg",
"screenshot_renderer": "playwright-chromium",
"external_link_targets": []
},
"browser_analysis": {
"cookies": {
"items": [
{
"name": "_pk_id.128.2b69",
"domain": "www.mpq.mpg.de",
"secure": false,
"expires": 1815906284,
"http_only": false,
"same_site": "Lax"
},
{
"name": "_pk_ses.128.2b69",
"domain": "www.mpq.mpg.de",
"secure": false,
"expires": 1781952884,
"http_only": false,
"same_site": "Lax"
},
{
"name": "_mpg_session_r",
"domain": "www.mpq.mpg.de",
"secure": false,
"expires": -1,
"http_only": true,
"same_site": "Lax"
}
],
"total": 3,
"third_party": 0
},
"storage": {
"total": 0,
"local_storage_keys": [],
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_keys": [],
"session_storage_total": 0
},
"findings": [
{
"id": "third_party_page_url_parameter",
"count": 1,
"title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
"public": true,
"category": "privacy",
"severity": "warning"
},
{
"id": "browser_keystroke_listener_signals",
"count": 7,
"title": "Viele Tastatur-/Eingabe-Listener im Browser erkannt",
"public": true,
"category": "privacy",
"severity": "info"
},
{
"id": "beacon_api_usage",
"count": 2,
"title": "Beacon-/Keepalive-Telemetrie erkannt",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"renderer": "playwright-chromium",
"final_url": "https://www.mpq.mpg.de/",
"consent_ui": {
"accept_controls": [],
"accept_max_area": 0,
"reject_controls": [],
"reject_max_area": 0,
"settings_controls": [],
"first_layer_summary": "Akzeptieren 0 / Ablehnen 0 / Einstellungen 0",
"cookie_context_found": true,
"reject_less_prominent": false,
"visible_control_count": 28,
"reject_prominence_ratio": 0
},
"gpc_signal": {
"error": "",
"enabled": true,
"storage": {
"total": 0,
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"cookie_count": 3,
"request_count": 37,
"sec_gpc_header": true,
"navigator_value": true,
"contacted_domains": [
{
"host": "mpq.mpg.de",
"count": 35,
"category": "other",
"provider": "mpq.mpg.de",
"third_party": false,
"category_label": "Sonstige",
"resource_types": {
"font": 5,
"image": 20,
"script": 7,
"document": 1,
"stylesheet": 2
}
},
{
"host": "statistik.mpg.de",
"count": 2,
"category": "other",
"provider": "statistik.mpg.de",
"third_party": true,
"category_label": "Sonstige",
"resource_types": {
"ping": 1,
"script": 1
}
}
],
"contacted_domain_count": 2,
"privacy_relevant_domains": [],
"third_party_cookie_count": 0,
"third_party_domain_count": 1,
"privacy_relevant_domain_count": 0
},
"screenshot": {
"fit": "contain",
"width": 160,
"height": 150,
"source_width": 1024,
"source_height": 2048,
"source_capture": "top_max_2to1",
"capture_version": "contain-v5-top2to1-160x150"
},
"consent_apis": {
"cmpapi": false,
"tcfapi": false,
"onetrust": false,
"cookiebot": false,
"data_layer": false,
"cmp_detected": false,
"usercentrics": false,
"google_tag_data": false
},
"accept_signal": {
"error": "",
"enabled": false,
"storage": {
"total": 0,
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"clicked_text": "",
"accept_clicked": false,
"accept_available": false,
"contacted_domains": [],
"contacted_domain_count": 0,
"new_domains_after_accept": [],
"privacy_relevant_domains": [],
"third_party_domain_count": 0,
"cookie_count_after_accept": 0,
"cookie_count_before_accept": 0,
"request_count_after_accept": 0,
"storage_count_after_accept": 0,
"request_count_before_accept": 0,
"new_cookie_count_after_accept": 0,
"privacy_relevant_domain_count": 0,
"new_request_count_after_accept": 0,
"third_party_cookie_count_after_accept": 0,
"storage_tracking_hint_count_after_accept": 0,
"new_privacy_relevant_domains_after_accept": [],
"new_privacy_relevant_domain_count_after_accept": 0
},
"request_count": 38,
"top_providers": [
{
"provider": "statistik.mpg.de",
"request_count": 2
}
],
"request_samples": [
{
"host": "statistik.mpg.de",
"method": "GET",
"referrer": {
"host": "mpq.mpg.de",
"has_path": false,
"has_query": false,
"same_site": true,
"path_depth": 0,
"query_keys": [],
"sensitive_query_key_count": 0
},
"has_query": false,
"path_depth": 1,
"query_keys": [],
"third_party": true,
"resource_type": "script",
"query_key_count": 0,
"url_value_param_count": 0,
"sensitive_query_key_count": 0,
"target_url_value_param_count": 0
},
{
"host": "statistik.mpg.de",
"method": "POST",
"referrer": {
"host": "mpq.mpg.de",
"has_path": false,
"has_query": false,
"same_site": true,
"path_depth": 0,
"query_keys": [],
"sensitive_query_key_count": 0
},
"has_query": true,
"path_depth": 1,
"query_keys": [
"action_name",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url",
"_id",
"_idn",
"send_image",
"_refts"
],
"third_party": true,
"resource_type": "ping",
"query_key_count": 22,
"url_value_param_count": 1,
"sensitive_query_key_count": 0,
"target_url_value_param_count": 1
}
],
"cmp_consent_state": {
"tcf": {
"api_found": false,
"vendor_li": [],
"cmp_loaded": false,
"cmp_status": "",
"purpose_li": [],
"event_status": "",
"gdpr_applies": null,
"ping_success": false,
"policy_version": "",
"vendor_consents": [],
"vendor_li_count": 0,
"purpose_consents": [],
"purpose_li_count": 0,
"tc_string_length": 0,
"tc_string_present": false,
"vendor_consent_count": 0,
"purpose_consent_count": 0
},
"onetrust": {
"found": false,
"active_groups": [],
"active_group_count": 0
},
"cookiebot": {
"found": false,
"declined": false,
"consented": false,
"has_response": false,
"consent_marketing": null,
"consent_statistics": null,
"consent_preferences": null
},
"usercentrics": {
"found": false,
"has_response": false,
"services_count": 0,
"accepted_services_count": 0
}
},
"contacted_domains": [
{
"host": "mpq.mpg.de",
"count": 36,
"category": "other",
"provider": "mpq.mpg.de",
"third_party": false,
"category_label": "Sonstige",
"resource_types": {
"font": 6,
"image": 20,
"script": 7,
"document": 1,
"stylesheet": 2
}
},
{
"host": "statistik.mpg.de",
"count": 2,
"category": "other",
"provider": "statistik.mpg.de",
"third_party": true,
"category_label": "Sonstige",
"resource_types": {
"ping": 1,
"script": 1
}
}
],
"rendered_page_text": {
"length": 13529,
"available": true
},
"privacy_api_metrics": {
"api_calls": {
"beacon_count": 1,
"keyboard_input_listener_count": 7
},
"beacon_count": 1,
"webgl_read_count": 0,
"canvas_read_count": 0,
"audio_context_count": 0,
"canvas_export_count": 0,
"fetch_keepalive_count": 0,
"webgl_parameter_count": 0,
"mutation_observer_count": 0,
"keyboard_input_listener_count": 7
},
"tcf_consent_analysis": {
"color": "green",
"score": 100,
"status": "unauffällig",
"summary": "TCF-Decoder: 0 Zweck(e) mit Consent/LI-Signal, 0 Vendor-Consent(s), 0 Vendor-LI-Signal(e).",
"findings": [],
"api_found": false,
"available": false,
"cmp_loaded": false,
"cmp_status": "",
"event_status": "",
"gdpr_applies": null,
"ping_success": false,
"purpose_rows": [
{
"id": 1,
"label": "Informationen auf einem Gerät speichern und/oder abrufen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 2,
"label": "Einfache Anzeigen auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 3,
"label": "Personalisiertes Anzeigen-Profil erstellen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 4,
"label": "Personalisierte Anzeigen auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 5,
"label": "Personalisiertes Inhalts-Profil erstellen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 6,
"label": "Personalisierte Inhalte auswählen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 7,
"label": "Anzeigen-Leistung messen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 8,
"label": "Inhalte-Leistung messen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 9,
"label": "Marktforschung zur Generierung von Erkenntnissen nutzen",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 10,
"label": "Produkte entwickeln und verbessern",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
},
{
"id": 11,
"label": "Begrenzte Daten zur Anzeigen-Auswahl verwenden",
"status": "nicht_erlaubt",
"risk_level": "niedrig",
"consent_granted": false,
"legitimate_interest_granted": false
}
],
"vendor_li_ids": [],
"policy_version": "",
"vendor_li_count": 0,
"purpose_li_count": 0,
"tc_string_length": 0,
"tc_string_present": false,
"vendor_consent_ids": [],
"granted_purpose_rows": [],
"vendor_consent_count": 0,
"purpose_consent_count": 0,
"high_risk_purpose_count": 0,
"medium_risk_purpose_count": 0
},
"viewport_transparency": {
"samples": [],
"available": true,
"sample_count": 0,
"claim_boundary": "Sichtbarkeits-Evidence aus dem ersten Headless-Chromium-Viewport; keine Aussage ueber Footer nach Scrollen, Loginbereiche oder rechtliche Vollstaendigkeit.",
"viewport_width": 1024,
"category_counts": [],
"contact_visible": false,
"imprint_visible": false,
"viewport_height": 2048,
"cookie_consent_visible": false,
"privacy_notice_visible": false
},
"consent_journey_matrix": {
"color": "green",
"items": [
{
"host": "statistik.mpg.de",
"states": {
"gpc": 2,
"default": 2
},
"category": "other",
"provider": "statistik.mpg.de",
"category_label": "Sonstige",
"privacy_relevant": false,
"total_request_count": 4
}
],
"score": 100,
"states": [
{
"id": "default",
"label": "Erstaufruf",
"description": "Kontakte ohne Nutzeraktion",
"domain_count": 1,
"request_count": 2,
"privacy_relevant_domain_count": 0
},
{
"id": "reject_new",
"label": "Nach Ablehnen neu",
"description": "Neue Kontakte nach Ablehnen-Klick",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "accept_new",
"label": "Nach Akzeptieren neu",
"description": "Neue Kontakte nach Akzeptieren-Klick",
"domain_count": 0,
"request_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "gpc",
"label": "GPC-Aufruf",
"description": "Kontakte bei Global Privacy Control",
"domain_count": 1,
"request_count": 2,
"privacy_relevant_domain_count": 0
}
],
"status": "unauffällig",
"summary": "Consent-Journey: 0 neue Datenschutz-Domain(s) nach Ablehnen, 0 nach Akzeptieren, 0 im GPC-Aufruf.",
"gpc_privacy_relevant_domain_count": 0,
"accept_privacy_relevant_domain_count": 0,
"reject_privacy_relevant_domain_count": 0
},
"consent_state_evidence": {
"rows": [
{
"id": "default",
"label": "Erstaufruf",
"status": "ohne Nutzeraktion",
"evidence": "Baseline aus erstem Chromium-Aufruf ohne Banner-Interaktion.",
"risk_level": "niedrig",
"cookie_count": 3,
"domain_count": 2,
"request_count": 38,
"storage_total": 0,
"new_cookie_count": 3,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "reject",
"label": "Nach Ablehnen",
"status": "nicht verfügbar",
"evidence": "",
"risk_level": "niedrig",
"cookie_count": 3,
"domain_count": 0,
"request_count": 0,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "accept",
"label": "Nach Akzeptieren",
"status": "nicht ausgeführt",
"evidence": "",
"risk_level": "niedrig",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"id": "gpc",
"label": "GPC-Aufruf",
"status": "aktiv",
"evidence": "Navigator-GPC und Sec-GPC wurden im gesonderten Browserlauf gesetzt.",
"risk_level": "niedrig",
"cookie_count": 3,
"domain_count": 2,
"request_count": 37,
"storage_total": 0,
"new_cookie_count": 0,
"third_party_cookie_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
}
],
"color": "green",
"score": 100,
"status": "unauffällig",
"summary": "Consent-State-Evidence: 4 Zustände verglichen, 0 hoch auffällig, 0 mittel auffällig.",
"findings": [],
"available": true,
"high_count": 0,
"medium_count": 0
},
"contacted_domain_count": 2,
"fingerprinting_analysis": {
"color": "green",
"score": 94,
"checks": [
{
"id": "canvas",
"ok": true,
"count": 0,
"label": "Canvas-Auslese",
"detail": "0 Pixel-Lesezugriff(e), 0 Export(e)."
},
{
"id": "webgl",
"ok": true,
"count": 0,
"label": "WebGL-Merkmale",
"detail": "0 Parameterzugriff(e), 0 Pixel-Lesezugriff(e)."
},
{
"id": "audio",
"ok": true,
"count": 0,
"label": "AudioContext",
"detail": "0 AudioContext/OfflineAudioContext-Aufruf(e)."
},
{
"id": "session_replay",
"ok": true,
"count": 0,
"label": "Session-Replay-Anbieter",
"detail": "Keine bekannten Anbieter erkannt."
},
{
"id": "input_listeners",
"ok": false,
"count": 7,
"label": "Tastatur-/Eingabe-Listener",
"detail": "7 Tastatur-/Input-Listener, 118 Interaktions-Listener, 0 MutationObserver."
}
],
"status": "unauffällig",
"metrics": {
"webgl_read_count": 0,
"canvas_read_count": 0,
"audio_context_count": 0,
"canvas_export_count": 0,
"webgl_parameter_count": 0,
"mutation_observer_count": 0,
"keyboard_input_listener_count": 7
},
"summary": "1 Fingerprinting-/Session-Replay-Hinweis(e) aus dem Browserlauf.",
"findings": [
{
"id": "browser_keystroke_listener_signals",
"count": 7,
"title": "Viele Tastatur-/Eingabe-Listener im Browser erkannt",
"public": true,
"category": "privacy",
"severity": "info"
}
],
"finding_count": 1,
"session_replay_domains": []
},
"privacy_relevant_domains": [],
"provider_category_counts": {
"other": 1
},
"provider_category_labels": {
"other": "other"
},
"third_party_domain_count": 1,
"embedded_content_analysis": {
"color": "green",
"items": [],
"score": 100,
"status": "unauffällig",
"summary": "0 externe Embed-/Widget-Dienst(e), 0 davon im ersten Browseraufruf geladen.",
"findings": [],
"map_count": 0,
"total_count": 0,
"video_count": 0,
"captcha_count": 0,
"category_counts": [],
"social_widget_count": 0,
"loaded_pre_consent_count": 0,
"request_count_by_provider": []
},
"referrer_leakage_analysis": {
"color": "yellow",
"items": [
{
"host": "statistik.mpg.de",
"category": "other",
"provider": "statistik.mpg.de",
"query_keys": [
"action_name",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url"
],
"risk_reason": "Seiten-URL oder URL-Wert in Drittanbieter-Requestparametern",
"resource_type": "ping",
"category_label": "Sonstige",
"referrer_query_keys": [],
"url_value_param_count": 1,
"target_url_value_param_count": 1
}
],
"score": 88,
"status": "prüfen",
"summary": "1 Drittanbieter-Domain(s) mit Referrer-/URL-Leak-Prüfbedarf, 0 sensible Query-Kontexte.",
"findings": [
{
"id": "third_party_page_url_parameter",
"count": 1,
"title": "Seiten-URL wird in Drittanbieter-Requests übertragen",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"sample_count": 2,
"full_referrer_count": 0,
"page_url_param_count": 1,
"affected_domain_count": 1,
"sensitive_query_count": 0
},
"third_party_contact_matrix": {
"color": "green",
"items": [
{
"host": "statistik.mpg.de",
"region": "EU/EWR",
"status": "prüfen",
"category": "other",
"provider": "statistik.mpg.de",
"risk_level": "niedrig",
"request_count": 2,
"transfer_risk": "niedrig",
"category_label": "Sonstige",
"resource_types": [
{
"type": "ping",
"count": 1
},
{
"type": "script",
"count": 1
}
],
"transfer_label": "EU/EWR",
"privacy_relevant": false
}
],
"score": 100,
"status": "unauffällig",
"summary": "1 Drittanbieter-Domain(s) beim ersten Browseraufruf, davon 0 datenschutzrelevant.",
"category_counts": {
"Sonstige": 1
},
"total_domain_count": 1,
"total_request_count": 2,
"privacy_relevant_count": 0,
"transfer_risk_analysis": {
"color": "green",
"items": [
{
"host": "statistik.mpg.de",
"region": "EU/EWR",
"provider": "statistik.mpg.de",
"request_count": 2,
"transfer_risk": "niedrig",
"category_label": "Sonstige",
"transfer_label": "EU/EWR",
"privacy_relevant": false
}
],
"score": 100,
"status": "unauffällig",
"summary": "1 Drittanbieter für Transfer-/Jurisdiktionsprüfung, 0 mit hohem Prüfbedarf, 0 unklar.",
"findings": [],
"unknown_count": 0,
"high_risk_count": 0,
"total_vendor_count": 1,
"third_country_count": 0
}
},
"rendered_transparency_links": [
{
"top": 382,
"href": "https://www.mpq.mpg.de/6408710/points-of-contact-for-employees",
"left": 68,
"text": "",
"visible": false,
"category": "contact"
},
{
"top": 5995,
"href": "https://www.mpq.mpg.de/2378/contact",
"left": 360,
"text": "Kontakt",
"visible": false,
"category": "contact"
},
{
"top": 6149,
"href": "https://www.mpq.mpg.de/2384/imprint",
"left": 381,
"text": "Impressum",
"visible": false,
"category": "imprint"
},
{
"top": 6149,
"href": "https://www.mpq.mpg.de/5279080/datenschutz",
"left": 506,
"text": "Datenschutzhinweis",
"visible": false,
"category": "privacy_notice"
}
],
"privacy_relevant_domain_count": 0,
"tracking_pixel_beacon_analysis": {
"color": "yellow",
"items": [
{
"url": "",
"host": "mpq.mpg.de",
"kind": "beacon_api",
"reason": "sendBeacon API 1 Aufruf(e), 0 Code-Hinweis(e); keepalive 0 Aufruf(e), 0 Code-Hinweis(e).",
"source": "javascript_api",
"category": "telemetry",
"provider": "Beacon-/Keepalive-API",
"third_party": false,
"resource_type": "beacon",
"category_label": "Telemetry"
}
],
"score": 82,
"status": "prüfen",
"summary": "0 Pixel-/Bildtracking-Hinweis(e), 2 Beacon-/Telemetry-Hinweis(e), 0 Link-Ping(s).",
"findings": [
{
"id": "beacon_api_usage",
"count": 2,
"title": "Beacon-/Keepalive-Telemetrie erkannt",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"pixel_count": 0,
"link_ping_count": 0,
"telemetry_count": 1,
"beacon_api_count": 1,
"third_party_count": 0,
"fetch_keepalive_count": 0,
"privacy_relevant_count": 0,
"beacon_code_reference_count": 0,
"fetch_keepalive_reference_count": 0
}
},
"privacy_analysis": {
"cookies": {
"items": [
{
"name": "_mpg_session_r",
"secure": false,
"samesite": true,
"tracking": false,
"pre_consent": true,
"likely_essential": true
}
],
"total": 1,
"tracking": [],
"pre_consent": [
"_mpg_session_r"
],
"missing_secure": [
"_mpg_session_r"
],
"missing_samesite": [],
"pre_consent_tracking": [],
"pre_consent_nonessential": []
},
"findings": [
{
"id": "cookie_missing_secure",
"title": "Cookie ohne Secure-Flag",
"public": true,
"cookies": [
"_mpg_session_r"
],
"category": "privacy",
"severity": "warning"
}
],
"tracking_ids": [],
"tracking_scripts": [],
"consent_hint_found": false,
"privacy_policy_hint_found": false
},
"consent_audit": {
"color": "red",
"score": 8,
"checks": [
{
"id": "banner_visible",
"ok": false,
"label": "Cookie-/Consent-Hinweis sichtbar",
"detail": "Ein Hinweis mit Cookie-/Einwilligungsbezug wurde im sichtbaren Text erkannt."
},
{
"id": "reject_visible",
"ok": false,
"label": "Ablehnen gleichwertig erreichbar",
"detail": "Ablehnen oder nur notwendige Cookies wurde im Text oder Browser erkannt. Browser-Buttons: 0."
},
{
"id": "settings_visible",
"ok": false,
"label": "Einstellungen oder Auswahl vorhanden",
"detail": "Eine Einstellungs- oder Auswahlmoeglichkeit wurde im Text oder Browser erkannt. Browser-Buttons: 0."
},
{
"id": "browser_reject_visible",
"ok": true,
"label": "Ablehnen im sichtbaren Banner",
"detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
},
{
"id": "browser_settings_visible",
"ok": true,
"label": "Einstellungen im sichtbaren Banner",
"detail": "Sichtbare Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0."
},
{
"id": "reject_equally_prominent",
"ok": true,
"label": "Ablehnen nicht deutlich schwaecher dargestellt",
"detail": "Groessen-Verhältnis Ablehnen/Akzeptieren: nicht messbar."
},
{
"id": "reject_button_clickable",
"ok": true,
"label": "Ablehnen technisch klickbar",
"detail": "Wenn ein Ablehnen-Button sichtbar ist, klickt SaferPage ihn im Chromium-Browser einmal an."
},
{
"id": "no_new_cookies_after_reject",
"ok": true,
"label": "Keine neuen Cookies nach Ablehnen",
"detail": "0 neue Cookie(s) nach dem Ablehnen-Klick."
},
{
"id": "no_tracking_storage_after_reject",
"ok": true,
"label": "Kein Tracking-Storage nach Ablehnen",
"detail": "0 Tracking-Hinweis(e) im Web Storage nach Ablehnen."
},
{
"id": "no_privacy_domains_after_reject",
"ok": true,
"label": "Keine neuen Tracking-Kontakte nach Ablehnen",
"detail": "0 neue datenschutzrelevante Domain(s) nach Ablehnen."
},
{
"id": "gpc_signal_respected",
"ok": true,
"label": "GPC-Signal ohne Tracking-Hinweise",
"detail": "GPC-Aufruf: 0 datenschutzrelevante Domain(s), 0 Drittanbieter-Cookie(s), 0 Storage-Hinweis(e)."
},
{
"id": "no_tracking_cookies_before_consent",
"ok": false,
"label": "Keine Tracking-Cookies vor Einwilligung",
"detail": "2 Tracking-Cookie(s) im Erstaufruf."
},
{
"id": "no_nonessential_cookies_before_consent",
"ok": false,
"label": "Keine nicht notwendigen Cookies vor Einwilligung",
"detail": "2 moeglicherweise nicht notwendige Cookie(s) im Erstaufruf."
},
{
"id": "third_parties_explained",
"ok": true,
"label": "Drittanbieter begrenzt und erklaerbar",
"detail": "0 datenschutzrelevante Drittanbieter-Domain(s), 1 Drittanbieter insgesamt."
},
{
"id": "storage_without_tracking_hints",
"ok": true,
"label": "Web Storage ohne Tracking-Hinweise",
"detail": "0 Storage-Key(s), 0 Tracking-Hinweis(e)."
},
{
"id": "cmp_api_detected_when_needed",
"ok": true,
"label": "CMP-/TCF-Signal bei Tracking erkennbar",
"detail": "Gängige CMP-/TCF-Indikatoren: __tcfapi, __cmp, Cookiebot, OneTrust oder Usercentrics."
},
{
"id": "accept_click_documented",
"ok": true,
"label": "Akzeptieren-Klick nachvollziehbar",
"detail": "Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0."
},
{
"id": "cmp_state_readable",
"ok": true,
"label": "CMP-/TCF-Zustand auslesbar",
"detail": "TCF TC-String: nein, Cookiebot: nein, OneTrust: nein, Usercentrics: nein."
},
{
"id": "cmp_default_restrictive",
"ok": true,
"label": "CMP-Default wirkt restriktiv",
"detail": "TCF Purposes erlaubt: 0, TCF Vendors erlaubt: 0, Cookiebot Statistik/Marketing: nein."
}
],
"status": "kritisch",
"summary": "Consent, Tracking oder Drittanbieter wirken im Erstaufruf deutlich nachbesserungsbeduerftig.",
"evidence": [
"3 Cookie(s) beim ersten Aufruf aus HTTP-Headern und Chromium",
"0 Tracking-Script(s) im HTML",
"0 datenschutzrelevante Drittanbieter-Domain(s)",
"0 Storage-Key(s), 0 Tracking-Hinweis(e)",
"Consent-Banner-Controls: Akzeptieren 0, Ablehnen 0, Einstellungen 0",
"Ablehnen/Akzeptieren-Prominenz: nicht messbar",
"Reject-Test: nicht ausgefuehrt, neue Cookies 0, Tracking-Storage 0, neue Datenschutz-Domains 0",
"Accept-Test: nicht ausgefuehrt, neue Requests 0, neue Cookies 0, neue Datenschutz-Domains 0, Drittanbieter-Cookies 0",
"CMP-State: TCF-String nein, TCF Purposes 0, TCF Vendors 0, Cookiebot nein, OneTrust-Gruppen 0, Usercentrics-Services 0",
"GPC-Test: aktiv, Datenschutz-Domains 0, Drittanbieter-Cookies 0, Storage-Hinweise 0",
"CMP-/TCF-Signal: nein",
"Google Consent Default: nein"
],
"gpc_enabled": true,
"cmp_detected": false,
"blocking_plan": {
"items": [
{
"kind": "cookie",
"level": "hoch",
"source": "Matomo",
"target": "_pk_id.128.2b69",
"recipes": [
{
"tool": "Google Tag Manager"
},
{
"tool": "Cookiebot"
},
{
"tool": "Usercentrics"
},
{
"tool": "OneTrust"
},
{
"tool": "Developer-Fallback"
}
],
"category": "analytics",
"evidence": "vor Consent gesetzt · mpq.mpg.de · lang (392 Tage)",
"category_label": "Analytics"
},
{
"kind": "cookie",
"level": "hoch",
"source": "Matomo",
"target": "_pk_ses.128.2b69",
"recipes": [
{
"tool": "Google Tag Manager"
},
{
"tool": "Cookiebot"
},
{
"tool": "Usercentrics"
},
{
"tool": "OneTrust"
},
{
"tool": "Developer-Fallback"
}
],
"category": "analytics",
"evidence": "vor Consent gesetzt · mpq.mpg.de · kurz (0 Tage)",
"category_label": "Analytics"
}
],
"summary": "2 Blockier-/Consent-Maßnahme(n) abgeleitet: 2 hoch, 0 mittel.",
"available": true,
"high_count": 2,
"total_count": 2,
"type_counts": {
"cookie": 2
},
"medium_count": 0
},
"tcf_api_found": false,
"cookiebot_found": false,
"accept_test_enabled": false,
"browser_cookie_count": 3,
"accept_button_clicked": false,
"browser_storage_count": 0,
"reject_button_clicked": false,
"reject_less_prominent": false,
"tcf_tc_string_present": false,
"tracking_script_count": 0,
"accept_button_available": false,
"reject_button_available": false,
"reject_prominence_ratio": 0,
"pre_consent_cookie_count": 3,
"pre_consent_cookie_names": [
"_mpg_session_r",
"_pk_id.128.2b69",
"_pk_ses.128.2b69"
],
"tcf_vendor_consent_count": 0,
"third_party_domain_count": 1,
"tcf_purpose_consent_count": 0,
"onetrust_active_group_count": 0,
"usercentrics_services_count": 0,
"browser_accept_control_count": 0,
"browser_cookie_context_found": true,
"browser_reject_control_count": 0,
"gpc_third_party_cookie_count": 0,
"post_accept_new_cookie_count": 0,
"post_reject_new_cookie_count": 0,
"post_accept_new_request_count": 0,
"browser_settings_control_count": 0,
"gpc_storage_tracking_hint_count": 0,
"cookiebot_marketing_or_statistics": false,
"gpc_privacy_relevant_domain_count": 0,
"pre_consent_tracking_cookie_count": 2,
"pre_consent_tracking_cookie_names": [
"_pk_id.128.2b69",
"_pk_ses.128.2b69"
],
"privacy_relevant_third_party_count": 0,
"browser_storage_tracking_hint_count": 0,
"post_accept_third_party_cookie_count": 0,
"pre_consent_nonessential_cookie_count": 2,
"pre_consent_nonessential_cookie_names": [
"_pk_id.128.2b69",
"_pk_ses.128.2b69"
],
"post_accept_storage_tracking_hint_count": 0,
"post_reject_storage_tracking_hint_count": 0,
"post_accept_privacy_relevant_domain_count": 0,
"post_reject_privacy_relevant_domain_count": 0
},
"cookie_inventory": {
"color": "orange",
"items": [
{
"name": "_pk_id.128.2b69",
"domain": "mpq.mpg.de",
"secure": false,
"sources": [
"browser_first_load"
],
"category": "analytics",
"provider": "Matomo",
"tracking": true,
"http_only": false,
"same_site": "Lax",
"expires_at": "2027-07-18T10:24:44+00:00",
"long_lived": true,
"persistent": true,
"first_party": true,
"origin_host": "mpq.mpg.de",
"pre_consent": true,
"source_label": "Chromium-Erstaufruf",
"category_label": "Analytics",
"retention_risk": "hoch",
"expires_in_days": 392,
"origin_evidence": "36 Browser-Request(s) · document:1, font:6, image:20, script:7",
"origin_provider": "mpq.mpg.de",
"retention_class": "long",
"retention_label": "lang (392 Tage)",
"likely_essential": false,
"origin_script_url": "",
"origin_resource_type": ""
},
{
"name": "_pk_ses.128.2b69",
"domain": "mpq.mpg.de",
"secure": false,
"sources": [
"browser_first_load"
],
"category": "analytics",
"provider": "Matomo",
"tracking": true,
"http_only": false,
"same_site": "Lax",
"expires_at": "2026-06-20T10:54:44+00:00",
"long_lived": false,
"persistent": true,
"first_party": true,
"origin_host": "mpq.mpg.de",
"pre_consent": true,
"source_label": "Chromium-Erstaufruf",
"category_label": "Analytics",
"retention_risk": "niedrig",
"expires_in_days": 0,
"origin_evidence": "36 Browser-Request(s) · document:1, font:6, image:20, script:7",
"origin_provider": "mpq.mpg.de",
"retention_class": "short",
"retention_label": "kurz (0 Tage)",
"likely_essential": false,
"origin_script_url": "",
"origin_resource_type": ""
},
{
"name": "_mpg_session_r",
"domain": "mpq.mpg.de",
"secure": false,
"sources": [
"http_set_cookie",
"browser_first_load"
],
"category": "necessary",
"provider": "mpq.mpg.de",
"tracking": false,
"http_only": true,
"same_site": "Lax",
"expires_at": "",
"long_lived": false,
"persistent": false,
"first_party": true,
"origin_host": "mpq.mpg.de",
"pre_consent": true,
"source_label": "HTTP Set-Cookie, Chromium-Erstaufruf",
"category_label": "Notwendig",
"retention_risk": "niedrig",
"expires_in_days": null,
"origin_evidence": "36 Browser-Request(s) · document:1, font:6, image:20, script:7",
"origin_provider": "mpq.mpg.de",
"retention_class": "session",
"retention_label": "Session",
"likely_essential": true,
"origin_script_url": "",
"origin_resource_type": ""
}
],
"score": 55,
"total": 3,
"status": "auffällig",
"summary": "3 Cookie(s) inventarisiert: 2 Tracking-/Werbe-Cookie(s), 0 Drittanbieter-Cookie(s), 1 langlebige Cookie(s), 0 sehr lange Laufzeit(en).",
"findings": [
{
"id": "long_lived_tracking_cookie",
"count": 1,
"title": "Langlebige Tracking-/Marketing-Cookies",
"public": true,
"category": "privacy",
"severity": "warning"
}
],
"categories": {
"analytics": 2,
"necessary": 1
},
"tracking_count": 2,
"category_labels": {
"consent": "Consent",
"payment": "Zahlung",
"unknown": "Unklar",
"security": "Sicherheit",
"analytics": "Analytics",
"necessary": "Notwendig",
"functional": "Funktional",
"advertising": "Werbung"
},
"long_lived_count": 1,
"persistent_count": 2,
"first_party_count": 3,
"pre_consent_count": 3,
"retention_classes": {
"long": 1,
"short": 1,
"session": 1
},
"third_party_count": 0,
"missing_secure_count": 3,
"retention_risk_count": 1,
"retention_risk_items": [
{
"name": "_pk_id.128.2b69",
"domain": "mpq.mpg.de",
"secure": false,
"sources": [
"browser_first_load"
],
"category": "analytics",
"provider": "Matomo",
"tracking": true,
"http_only": false,
"same_site": "Lax",
"expires_at": "2027-07-18T10:24:44+00:00",
"long_lived": true,
"persistent": true,
"first_party": true,
"origin_host": "mpq.mpg.de",
"pre_consent": true,
"source_label": "Chromium-Erstaufruf",
"category_label": "Analytics",
"retention_risk": "hoch",
"expires_in_days": 392,
"origin_evidence": "36 Browser-Request(s) · document:1, font:6, image:20, script:7",
"origin_provider": "mpq.mpg.de",
"retention_class": "long",
"retention_label": "lang (392 Tage)",
"likely_essential": false,
"origin_script_url": "",
"origin_resource_type": ""
}
],
"very_long_lived_count": 0,
"missing_samesite_count": 0,
"persistent_unknown_count": 0,
"long_lived_tracking_count": 1
},
"security_header_analysis": {
"color": "orange",
"score": 70,
"checks": [
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "HSTS",
"value": "",
"header": "strict-transport-security",
"present": false,
"purpose": "Erzwingt HTTPS nach dem ersten sicheren Aufruf.",
"severity": "warning"
},
{
"ok": true,
"note": "",
"label": "Content-Security-Policy",
"value": "frame-ancestors 'self' https://statistik.mpg.de",
"header": "content-security-policy",
"present": true,
"purpose": "Begrenzt Skript-, Frame- und Ressourcenquellen im Browser.",
"severity": "warning"
},
{
"ok": true,
"note": "",
"label": "X-Frame-Options",
"value": "SAMEORIGIN",
"header": "x-frame-options",
"present": true,
"purpose": "Reduziert Clickjacking-Risiken bei älteren Browsern.",
"severity": "warning"
},
{
"ok": true,
"note": "",
"label": "X-Content-Type-Options",
"value": "nosniff",
"header": "x-content-type-options",
"present": true,
"purpose": "Verhindert MIME-Sniffing bei Skripten und Stylesheets.",
"severity": "warning"
},
{
"ok": true,
"note": "",
"label": "Referrer-Policy",
"value": "strict-origin-when-cross-origin",
"header": "referrer-policy",
"present": true,
"purpose": "Begrenzt, welche URL-Informationen an Zielseiten weitergegeben werden.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Permissions-Policy",
"value": "",
"header": "permissions-policy",
"present": false,
"purpose": "Begrenzt sensible Browser-Funktionen pro Seite.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Opener-Policy",
"value": "",
"header": "cross-origin-opener-policy",
"present": false,
"purpose": "Isoliert Top-Level-Fenster und reduziert Cross-Origin-Seiteneffekte.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Resource-Policy",
"value": "",
"header": "cross-origin-resource-policy",
"present": false,
"purpose": "Begrenzt, welche fremden Seiten Ressourcen einbetten dürfen.",
"severity": "info"
},
{
"ok": false,
"note": "Fehlt in der HTTP-Antwort.",
"label": "Cross-Origin-Embedder-Policy",
"value": "",
"header": "cross-origin-embedder-policy",
"present": false,
"purpose": "Erzwingt kontrollierte Cross-Origin-Einbettungen und kann Cross-Origin Isolation ermöglichen.",
"severity": "info"
}
],
"status": "auffällig",
"missing": [
"HSTS",
"Permissions-Policy",
"Cross-Origin-Opener-Policy",
"Cross-Origin-Resource-Policy",
"Cross-Origin-Embedder-Policy"
],
"summary": "4 von 9 wichtigen Security-Headern vorhanden, 4 korrekt bewertet. CSP wirksam mit 1 Direktive(n), 0 Warnung(en), 2 Hinweis(e).",
"findings": [
{
"id": "csp_missing_object_src",
"title": "CSP ohne object-src",
"public": true,
"category": "security_headers",
"severity": "info"
},
{
"id": "csp_missing_base_uri",
"title": "CSP ohne base-uri",
"public": true,
"category": "security_headers",
"severity": "info"
}
],
"ok_count": 4,
"weak_count": 0,
"csp_analysis": {
"color": "yellow",
"score": 88,
"status": "prüfen",
"summary": "CSP wirksam mit 1 Direktive(n), 0 Warnung(en), 2 Hinweis(e).",
"enforced": true,
"findings": [
{
"id": "csp_missing_object_src",
"title": "CSP ohne object-src",
"public": true,
"category": "security_headers",
"severity": "info"
},
{
"id": "csp_missing_base_uri",
"title": "CSP ohne base-uri",
"public": true,
"category": "security_headers",
"severity": "info"
}
],
"available": true,
"directives": [
{
"name": "frame-ancestors",
"value": "'self' https://statistik.mpg.de",
"values": [
"'self'",
"https://statistik.mpg.de"
]
}
],
"info_count": 2,
"report_only": false,
"finding_count": 2,
"warning_count": 0
},
"missing_count": 5,
"present_count": 4,
"missing_info_count": 4,
"missing_warning_count": 1
},
"infrastructure_analysis": {
"signals": {
"caa": false,
"dnssec": false,
"final_https": true,
"tls_version": "TLSv1.3",
"hsts_enabled": false,
"address_count": 1,
"ipv6_available": false,
"email_protection": {
"mx": true,
"spf": true,
"dmarc": false
},
"certificate_valid": true,
"certificate_issuer": "GEANT TLS RSA 1",
"certificate_alt_names": [
"cert05.cms.mpg.de",
"thirdinfinity.mpg.de",
"mpi-halle.mpg.de",
"mpqueer.mpg.de",
"www.eubuero.mpq.mpg.de",
"www.schloss-ringberg.mpg.de",
"neuro.mpg.de",
"mpi-stuttgart.mpg.de",
"www.neuro.mpg.de",
"phdnet.mpg.de",
"orn.mpg.de",
"dawn.mps.mpg.de",
"mpl.mpg.de",
"intranet.mpq.mpg.de",
"mpusp.mpg.de",
"mpsd.mpg.de",
"intranet.neuro.mpg.de",
"www.tax.mpg.de",
"www.mps.mpg.de",
"schloss-ringberg.mpg.de",
"www.mpl.mpg.de",
"www.ngice.mpg.de",
"www.psych.mpg.de",
"www.law.mpg.de",
"www.phdnet.mpg.de",
"www.imprs-stns.mpg.de",
"www.social.mpg.de",
"www.orn.mpg.de",
"mps.mpg.de",
"intranet.mpi-marburg.mpg.de",
"www.imprs-neurocom.mpg.de",
"www.mpqueer.mpg.de",
"eubuero.mpq.mpg.de",
"www.mpipz.mpg.de",
"mpq.mpg.de",
"tax.mpg.de",
"intranet.shh.mpg.de",
"www.mpi-muenster.mpg.de",
"www.mpusp.mpg.de",
"www.mpi-stuttgart.mpg.de",
"www.mpsd.mpg.de",
"mpi-marburg.mpg.de",
"www.mpiz-koeln.mpg.de",
"ngice.mpg.de",
"social.mpg.de",
"imprs-neurocom.cbs.mpg.de",
"mpiz-koeln.mpg.de",
"www.sf.mpg.de",
"www.rosetta.mps.mpg.de",
"rosetta.mps.mpg.de",
"www.mpi-marburg.mpg.de",
"www.mpq.mpg.de",
"mpi-muenster.mpg.de",
"www.mpipsykl.mpg.de",
"imprs-neurocom.mpg.de",
"sf.mpg.de",
"mpipsykl.mpg.de",
"mqm.mpsd.mpg.de",
"psych.mpg.de",
"www.dawn.mps.mpg.de",
"imprs-stns.mpg.de",
"intranet.mpipz.mpg.de",
"www.mpi-halle.mpg.de",
"www.thirdinfinity.mpg.de",
"law.mpg.de",
"mpipz.mpg.de"
],
"multiple_ip_addresses": false,
"certificate_expires_at": "Nov 7 16:55:14 2026 GMT",
"certificate_days_remaining": 140,
"certificate_hostname_matches": true
},
"findings": [
{
"id": "dmarc_missing",
"title": "DMARC fehlt",
"public": true,
"category": "email",
"severity": "info"
},
{
"id": "caa_missing",
"title": "CAA-Record fehlt",
"public": true,
"category": "dns",
"severity": "info"
}
],
"risk_level": "low",
"positive_signals": [
"Moderne TLS-Version aktiv: TLSv1.3."
]
},
"performance_analysis": {
"score": 100,
"signals": {
"compressed": false,
"duration_ms": 233,
"image_count": 7,
"script_count": 0,
"cache_control": "max-age=120, public",
"content_length": 0,
"viewport_found": true,
"stylesheet_count": 0
},
"findings": [],
"risk_level": "low"
},
"accessibility_analysis": {
"color": "green",
"score": 92,
"status": "unauffällig",
"signals": {
"h1_count": 0,
"image_count": 7,
"button_count": 3,
"heading_count": 6,
"viewport_found": true,
"html_lang_found": true,
"form_field_count": 2,
"image_missing_alt_count": 0,
"buttons_without_name_count": 0,
"form_fields_without_label_count": 0
},
"summary": "7 Bild(er), 2 Formularfeld(er), 3 Button(s) im passiven HTML-Sample auf Basis-Barrierefreiheit geprüft.",
"findings": [],
"wcag_matrix": {
"rows": [
{
"id": "wcag_non_text_content",
"ok": true,
"wcag": "WCAG 1.1.1 Non-text Content",
"title": "Alternativtexte für Bilder",
"impact": "niedrig",
"status": "ok",
"evidence": "0 von 7 Bild(er) ohne alt-Text im HTML-Sample."
},
{
"id": "wcag_form_labels",
"ok": true,
"wcag": "WCAG 1.3.1 Info and Relationships / 3.3.2 Labels or Instructions",
"title": "Formularfelder beschriften",
"impact": "niedrig",
"status": "ok",
"evidence": "0 von 2 Formularfeld(er) ohne erkennbare Beschriftung."
},
{
"id": "wcag_button_names",
"ok": true,
"wcag": "WCAG 4.1.2 Name, Role, Value",
"title": "Buttons mit Namen versehen",
"impact": "niedrig",
"status": "ok",
"evidence": "0 von 3 Button(s) ohne erkennbaren Namen."
},
{
"id": "wcag_page_language",
"ok": true,
"wcag": "WCAG 3.1.1 Language of Page",
"title": "Seitensprache auszeichnen",
"impact": "niedrig",
"status": "ok",
"evidence": "HTML-lang-Attribut gefunden."
},
{
"id": "wcag_heading_structure",
"ok": false,
"wcag": "WCAG 1.3.1 Info and Relationships / 2.4.6 Headings and Labels",
"title": "Überschriftenstruktur",
"impact": "mittel",
"status": "prüfen",
"evidence": "0 H1 und 6 Überschrift(en) im HTML-Sample."
},
{
"id": "wcag_mobile_reflow",
"ok": true,
"wcag": "WCAG 1.4.10 Reflow",
"title": "Mobile Viewport-Basis",
"impact": "niedrig",
"status": "ok",
"evidence": "Viewport-Meta-Tag gefunden."
}
],
"summary": "1 WCAG-/EAA-Prüfpunkt(e) auffällig, davon 0 mit hoher Auswirkung.",
"standard": "WCAG 2.2 orientierte Basisprüfung",
"available": true,
"issue_count": 1,
"high_impact_count": 0
}
},
"domain_history": {
"summary": "Domainhistorie konnte per RDAP nicht zuverlässig abgerufen werden.",
"findings": [],
"available": false,
"risk_level": "unknown"
},
"data_entry_analysis": {
"forms": [
{
"url": "https://www.mpq.mpg.de/5279080/datenschutz",
"path": "/5279080/datenschutz",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://www.mpq.mpg.de/2384/imprint",
"path": "/2384/imprint",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://www.mpq.mpg.de/2378/contact",
"path": "/2378/contact",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"url": "https://www.mpq.mpg.de/1548776/departments",
"path": "/1548776/departments",
"method": "UNBEKANNT",
"source": "crawl",
"purpose": "Formular",
"data_types": [],
"field_count": 0
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/5279080/datenschutz",
"url": "https://www.mpq.mpg.de/5279080/datenschutz"
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/2384/imprint",
"url": "https://www.mpq.mpg.de/2384/imprint"
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/2378/contact",
"url": "https://www.mpq.mpg.de/2378/contact"
},
{
"purpose": "Formular",
"field_count": 0,
"source": "crawl",
"path": "/1548776/departments",
"url": "https://www.mpq.mpg.de/1548776/departments"
}
],
"score": 84,
"summary": "Crawl fand 8 Formular(e) auf 4 geprüften Seite(n), u. a. /5279080/datenschutz, /2384/imprint, /2378/contact, /1548776/departments.",
"findings": [],
"form_count": 8,
"risk_level": "medium",
"field_count": 2,
"asks_for_data": true,
"crawl_form_pages": [
{
"url": "https://www.mpq.mpg.de/5279080/datenschutz",
"path": "/5279080/datenschutz",
"category": "datenschutz",
"form_count": 2
},
{
"url": "https://www.mpq.mpg.de/2384/imprint",
"path": "/2384/imprint",
"category": "impressum",
"form_count": 2
},
{
"url": "https://www.mpq.mpg.de/2378/contact",
"path": "/2378/contact",
"category": "kontakt",
"form_count": 2
},
{
"url": "https://www.mpq.mpg.de/1548776/departments",
"path": "/1548776/departments",
"category": "unterseite",
"form_count": 2
}
],
"payment_providers": [],
"detected_data_types": [],
"crawl_form_page_count": 4,
"privacy_context_found": false,
"operator_context_found": false
},
"pii_exposure_analysis": {
"color": "green",
"score": 100,
"checks": [
{
"id": "current_url",
"ok": true,
"count": 0,
"label": "Aktuelle URL",
"detail": "Keine sensiblen Query-Parameter erkannt."
},
{
"id": "link_queries",
"ok": true,
"count": 0,
"label": "Link-Parameter",
"detail": "Keine sensiblen Link-Querys erkannt."
},
{
"id": "get_forms",
"ok": true,
"count": 0,
"label": "GET-Formulare",
"detail": "Keine personenbezogenen GET-Formulare erkannt."
},
{
"id": "external_forms",
"ok": true,
"count": 0,
"label": "Externe Formularziele",
"detail": "Keine externen Formularziele mit personenbezogenen Feldern erkannt."
},
{
"id": "tracking_context",
"ok": true,
"count": 0,
"label": "Tracking neben Dateneingabe",
"detail": "Keine Kombination aus Dateneingabe und datenschutzrelevanten Drittanbietern erkannt."
}
],
"status": "unauffällig",
"summary": "0 PII-/Datenleck-Hinweis(e) aus URL-, Formular- und Browserkontext.",
"findings": [],
"link_hits": [],
"finding_count": 0,
"current_url_hits": [],
"tracking_context": false,
"sensitive_get_forms": []
},
"scan_history_analysis": {
"available": false,
"summary": "Noch kein früherer gespeicherter Scan für diese Domain vorhanden.",
"total_scan_count": 1,
"previous_scan_count": 0,
"history": [
{
"scan_id": "42a0bc6b-12ac-4422-92d5-05d831614e06",
"created_at": "2026-06-20 12:25:10.228917+02",
"score": 60,
"verdict": "auffällig",
"finding_count": 20,
"integrity_root_hash": "a332e610ff009810b6455fd6d063c0e977708ff529ae2bca0f38b815b680fdc1",
"integrity_available_hash_count": 9,
"current": true
}
],
"new_findings": [],
"resolved_findings": [],
"technical_changes": {
"available": false,
"summary": "Noch kein früherer Scan für technische Änderungen vorhanden."
}
},
"benchmark_analysis": {
"host": "mpq.mpg.de",
"rank": 1,
"score": 60,
"status": "im_mittelfeld",
"summary": "mpq.mpg.de liegt mit 60 Punkten ungefähr im gespeicherten Vergleichsfeld.",
"available": true,
"peer_count": 11722,
"percentile": 0,
"query_mode": "php_ttl_cache_refresh",
"distribution": {
"0_39": 1718,
"40_59": 4563,
"60_79": 5419,
"80_100": 22
},
"median_score": 59,
"average_score": 53.7,
"comparison_basis": "Neuester gespeicherter SaferPage-Scan je Domain; überwiegend deutschsprachige gespeicherte Checks.",
"same_score_count": 0,
"better_than_count": 0,
"qualified_peer_count": 11276,
"zero_score_count": 446,
"top_quartile_score": 65,
"top_decile_score": 69,
"qualified_average_score": 55.8,
"qualified_median_score": 59,
"qualified_top_quartile_score": 65,
"qualified_top_decile_score": 69,
"thresholds": [
{
"id": "critical",
"label": "Kritisch",
"range": "0-39",
"met": false
},
{
"id": "basic",
"label": "Basis stabilisieren",
"range": "40-59",
"met": false
},
{
"id": "managed",
"label": "Gesteuert",
"range": "60-79",
"met": true
},
{
"id": "strong",
"label": "Stark",
"range": "80-100",
"met": false
}
],
"risk_tier": "gesteuert",
"target_score": 80,
"aspirational_target_score": 80,
"gap_to_target": 20,
"gap_to_top_quartile": 5,
"gap_to_strong": 20,
"cache_ttl_seconds": 300
},
"audit_receipt": {
"url": "https://mpq.mpg.de/",
"host": "mpq.mpg.de",
"status": "verfügbar",
"bot_url": "https://saferpage.de/bot",
"summary": "Prüfbeleg für mpq.mpg.de: kontrollierter HTTP-/Browser-Kurzcheck mit 38 Request(s), 4 Consent-Zustand/Zuständen und 7 Artefakt(en).",
"renderer": "playwright-chromium",
"artifacts": [
{
"label": "Öffentlicher Kurzreport",
"detail": "https://saferpage.de/mpq.mpg.de",
"status": "verfügbar"
},
{
"label": "JSON-Export",
"detail": "Maschinenlesbarer Report mit Modulen, Nachweisen und Tabellen.",
"status": "verfügbar"
},
{
"label": "CSV-Export",
"detail": "Tabellarische Prüfzeilen für Betreiber, Datenschutz und Technik.",
"status": "verfügbar"
},
{
"label": "160x150 Seitenvorschau",
"detail": "/cache/screenshots/mpq.mpg.de-160x150-1b7603ced554d0b29d.png",
"status": "verfügbar"
},
{
"label": "Cookie-Erklärung",
"detail": "3 Cookie-/Storage-Eintrag/Einträge.",
"status": "prüfen"
},
{
"label": "Empfänger-/Anbieterinventar",
"detail": "1 Anbieterzeile(n), 0 AVV-/Rollenprüfung(en).",
"status": "unauffällig"
},
{
"label": "Barrierefreiheitserklärung-Entwurf",
"detail": "1 bekannte Barrierefreiheits-Punkt(e).",
"status": "Teilweise konform im automatischen Basischeck"
}
],
"available": true,
"final_url": "https://www.mpq.mpg.de/",
"checked_at": "2026-06-20T10:25:09+00:00",
"share_text": "SaferPage Prüfbeleg mpq.mpg.de: 38 Browser-Request(s), 1 Drittanbieter, 3 Cookie-/Storage-Einträge, geprüft am 2026-06-20T10:25:09.",
"user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests; kostenloser Report: <a href=\"https://saferpage.de/mpq.mpg.de\">https://saferpage.de/mpq.mpg.de</a>)",
"limitations": [
"Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
"Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
"Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
],
"scan_context": "crawler",
"coverage_items": [
{
"label": "HTTP/DNS/TLS",
"value": "HTTP 200 · DNS ok · TLS ok"
},
{
"label": "Browserlauf",
"value": "38 Request(s), 1 Drittanbieter-Domain(s), 3 Browser-Cookie(s)."
},
{
"label": "Consent-Zustände",
"value": "4 Zustand/Zustände: Default, Ablehnen, Akzeptieren und GPC soweit verfügbar."
},
{
"label": "Seitenabdeckung",
"value": "8 priorisierte Unterseite(n) im Nachweispack."
},
{
"label": "Drittanbieter-Auszug",
"value": "1 Anbieterzeile(n) im öffentlichen Nachweis."
},
{
"label": "Cookie-Auszug",
"value": "3 Cookie-Zeile(n) im öffentlichen Nachweis."
}
],
"confidence_score": 66,
"browser_final_url": "https://www.mpq.mpg.de/"
},
"evidence_integrity_manifest": {
"host": "mpq.mpg.de",
"status": "verfügbar",
"summary": "Integritätsmanifest für mpq.mpg.de: 9/9 Nachweisbereich(e) mit SHA-256-Hash dokumentiert.",
"sections": [
{
"id": "audit_receipt",
"hash": "eb51bde87539e72e251eb828184824767677046c84746c1f1620556004e8e9b4",
"count": 18,
"label": "Prüfbeleg",
"detail": "Kanonischer JSON-Hash des kompakten Prüfbelegs.",
"status": "verfügbar"
},
{
"id": "protocol",
"hash": "ffbf6fdacc31636594f02accaf9023944f10c8089cbea17d0660814e59bef31b",
"count": 15,
"label": "Scan-Protokoll",
"detail": "URL, Endziel, User-Agent, Zeitstempel, HTTP/DNS/TLS und Renderer.",
"status": "verfügbar"
},
{
"id": "checkpoints",
"hash": "abaefc78e9c4b66241560285f753360f2c6dd76ade9812eec23ed01f8677e1fc",
"count": 6,
"label": "Prüfschritte",
"detail": "Kanonischer JSON-Hash der dokumentierten Prüfstationen.",
"status": "verfügbar"
},
{
"id": "consent_states",
"hash": "4e76dff9ab6a38e0a2f2dd3d71cb9cbc78dfacdadd7cc997d3c7bc217f88f7d1",
"count": 4,
"label": "Consent-Zustände",
"detail": "Default-, Ablehnen-, Akzeptieren- und GPC-Nachweise soweit verfügbar.",
"status": "verfügbar"
},
{
"id": "third_party_evidence",
"hash": "1a199c9eef67c5adaec88d67ca5a5493e50d27b4c5c66e12f06dab2616b1e29e",
"count": 1,
"label": "Drittanbieter-Auszug",
"detail": "Sanitisierte Anbieter-, Kategorie-, Transfer- und Request-Zählwerte.",
"status": "verfügbar"
},
{
"id": "cookie_evidence",
"hash": "9e76587ea224d293ccc4729987c72cfaed759ede3580ae82d950c5d56d0113f1",
"count": 3,
"label": "Cookie-Auszug",
"detail": "Sanitisierte Cookie-Metadaten ohne Cookie-Werte.",
"status": "verfügbar"
},
{
"id": "request_samples",
"hash": "53dd588a9ddc4b8b96035d459a5343d5c9fa8dbb16ce4e3810e85c50df2b12a3",
"count": 2,
"label": "Request-Samples",
"detail": "Sanitisierte Drittanbieter-Samples ohne vollständige Request-URLs.",
"status": "verfügbar"
},
{
"id": "checked_pages",
"hash": "560ffcf312786af125920c3bc8fb2333a617819fdaf55909e89e332046e98ea5",
"count": 8,
"label": "Geprüfte Unterseiten",
"detail": "Priorisierte Pfade aus Sitemap, Pflichtseiten und interner Linkstruktur.",
"status": "verfügbar"
},
{
"id": "screenshot_file",
"hash": "62ebf55a0b1f039883bf2c1d7c2ab46ce9f7f219e03d0e4db9b08057cbe82726",
"count": 15760,
"label": "160x150 Seitenvorschau-Datei",
"detail": "/cache/screenshots/mpq.mpg.de-160x150-1b7603ced554d0b29d.png",
"status": "verfügbar"
}
],
"algorithm": "sha256",
"available": true,
"root_hash": "a332e610ff009810b6455fd6d063c0e977708ff529ae2bca0f38b815b680fdc1",
"checked_at": "2026-06-20T10:25:09+00:00",
"limitations": [
"Das Manifest schützt die im Report veröffentlichten/sanitisierten Nachweise, nicht verdeckte Cookie-Werte oder vollständige Request-URLs.",
"Ohne externe qualifizierte Zeitstempelung beweist der Hash Integrität des exportierten Artefakts, aber keine amtliche Zustellung."
],
"section_count": 9,
"canonicalization": "JSON UTF-8, sort_keys=true, kompakte Separatoren; Screenshot als rohe Datei-Bytes.",
"available_hash_count": 9
},
"audit_evidence_pack": {
"status": "verfügbar",
"summary": "Nachweisprotokoll mit 38 Browser-Request(s), 3 Cookie-Nachweis(en), 1 Drittanbieter-Auszug/auszügen und 4 Consent-Zustand/Zuständen.",
"protocol": {
"host": "mpq.mpg.de",
"dns_ok": true,
"tls_ok": true,
"bot_url": "https://saferpage.de/bot",
"renderer": "playwright-chromium",
"final_url": "https://www.mpq.mpg.de/",
"input_url": "https://mpq.mpg.de/",
"checked_at": "2026-06-20T10:25:09+00:00",
"user_agent": "SaferPageCrawler/0.3 (+https://saferpage.de/bot; schedules passive DACH website checks; report examples: https://saferpage.de/tests; kostenloser Report: <a href=\"https://saferpage.de/mpq.mpg.de\">https://saferpage.de/mpq.mpg.de</a>)",
"http_status": 200,
"scan_context": "crawler",
"screenshot_url": "/cache/screenshots/mpq.mpg.de-160x150-1b7603ced554d0b29d.png",
"googlebot_status": 200,
"browser_final_url": "https://www.mpq.mpg.de/",
"dns_address_count": 1
},
"checkpoints": [
{
"label": "DNS",
"detail": "1 Adresse(n) aufgelöst.",
"status": "ok"
},
{
"label": "TLS/HTTPS",
"detail": "TLSv1.3",
"status": "ok"
},
{
"label": "HTTP-Abruf",
"detail": "Status 200, Endziel https://www.mpq.mpg.de/.",
"status": "ok"
},
{
"label": "Browserlauf",
"detail": "38 Request(s), 1 Drittanbieter-Domain(s).",
"status": "ok"
},
{
"label": "Consent-Zustände",
"detail": "Default, Ablehnen, Akzeptieren und GPC werden soweit möglich gegenübergestellt.",
"status": "unauffällig"
},
{
"label": "Exports",
"detail": "PDF/Druck, JSON und CSV enthalten die wesentlichen Prüfnachweise.",
"status": "verfügbar"
}
],
"limitations": [
"Öffentliche Nachweise enthalten keine Cookie-Werte und keine vollständigen Request-URLs.",
"Der Scan ist ein passiver Browser- und HTTP-Kurzcheck; rechtliche Bewertung bleibt Betreiberaufgabe.",
"Dynamische Inhalte können sich je nach Region, Zeit, Gerät und Consent-Auswahl ändern."
],
"checked_pages": [
{
"path": "/5279080/datenschutz",
"source": "browser_rendered_link",
"status": 0,
"category": "datenschutz"
},
{
"path": "/2384/imprint",
"source": "browser_rendered_link",
"status": 0,
"category": "impressum"
},
{
"path": "/2378/contact",
"source": "browser_rendered_link",
"status": 0,
"category": "kontakt"
},
{
"path": "/1548776/departments",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/1548788/research_groups",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/1548824/res_schools",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/1548848/publications",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
},
{
"path": "/2153673/quanten",
"source": "homepage_link+sitemap",
"status": 0,
"category": "unterseite"
}
],
"cookie_evidence": [
{
"name": "_pk_id.128.2b69",
"domain": "mpq.mpg.de",
"secure": false,
"category": "Analytics",
"provider": "Matomo",
"tracking": true,
"retention": "lang (392 Tage)",
"same_site": "Lax",
"pre_consent": true
},
{
"name": "_pk_ses.128.2b69",
"domain": "mpq.mpg.de",
"secure": false,
"category": "Analytics",
"provider": "Matomo",
"tracking": true,
"retention": "kurz (0 Tage)",
"same_site": "Lax",
"pre_consent": true
},
{
"name": "_mpg_session_r",
"domain": "mpq.mpg.de",
"secure": false,
"category": "Notwendig",
"provider": "mpq.mpg.de",
"tracking": false,
"retention": "Session",
"same_site": "Lax",
"pre_consent": true
}
],
"browser_evidence": {
"gpc_enabled": true,
"request_count": 38,
"storage_total": 0,
"accept_clicked": false,
"reject_clicked": false,
"browser_cookie_count": 3,
"contacted_domain_count": 2,
"third_party_domain_count": 1,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
"storage_evidence": {
"tracking_key_hints": [],
"local_storage_total": 0,
"session_storage_total": 0
},
"third_party_evidence": [
{
"host": "statistik.mpg.de",
"category": "Sonstige",
"provider": "statistik.mpg.de",
"transfer": "EU/EWR",
"risk_level": "niedrig",
"request_count": 2,
"resource_types": [
"ping",
"script"
],
"privacy_relevant": false
}
],
"external_script_count": 0,
"consent_state_evidence": [
{
"label": "Erstaufruf",
"cookie_count": 0,
"domain_count": 1,
"request_count": 2,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "Nach Ablehnen neu",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "Nach Akzeptieren neu",
"cookie_count": 0,
"domain_count": 0,
"request_count": 0,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
},
{
"label": "GPC-Aufruf",
"cookie_count": 0,
"domain_count": 1,
"request_count": 2,
"storage_tracking_hint_count": 0,
"privacy_relevant_domain_count": 0
}
],
"request_sample_evidence": [
{
"host": "statistik.mpg.de",
"query_keys": [],
"resource_type": "script",
"query_key_count": 0,
"referrer_has_path": false,
"referrer_has_query": false,
"sensitive_query_key_count": 0
},
{
"host": "statistik.mpg.de",
"query_keys": [
"action_name",
"idsite",
"rec",
"r",
"h",
"m",
"s",
"url"
],
"resource_type": "ping",
"query_key_count": 22,
"referrer_has_path": false,
"referrer_has_query": false,
"sensitive_query_key_count": 0
}
]
},
"consent_visual_salience_evidence": {
"schema": "https://saferpage.de/schemas/consent-visual-salience-evidence.v1",
"status": "measured_dom_viewport_signal",
"available": true,
"evidence_level": "dom_viewport_signal_only",
"summary": "Der erste Headless-Chromium-Viewport liefert sichtbare Consent-Control-Signale mit Text, Position, Groesse und typografischen Hinweisen.",
"sample_status": "visible_controls_without_classified_samples",
"classified_sample_count": 0,
"accept_control_count": 0,
"reject_control_count": 0,
"settings_control_count": 0,
"visible_control_count": 28,
"accept_max_area": 0,
"reject_max_area": 0,
"reject_prominence_ratio": "nicht messbar",
"samples": [],
"sample_boundary": "Samples enthalten nur klassifizierte Accept-/Reject-/Settings-Controls. Weitere sichtbare Consent-Controls bleiben als Zaehler erhalten, werden aber ohne Klassifizierung nicht als Ablehnen-, Akzeptieren- oder Einstellungsprobe behauptet.",
"claim_boundary": "Consent-Visual-Salienz ist ein DOM-/Viewport-Signal aus dem ersten Browserlauf. Sie ist keine Rechtsbewertung, kein Dark-Pattern-Endurteil und kein Nachweis fuer spaetere Consent-Zustaende, Scrollbereiche, Loginbereiche oder manuelle Betreiberkontexte."
}
}
Geprüfte Domain-Wurzel: https://mpq.mpg.de/