{ "schema": "https://saferpage.de/schemas/technology-detection.v1", "generated_at": "2026-06-29T12:32:39+00:00", "domain": "frankenspalter.ch", "available": true, "scan": { "id": "491fe522-bd50-4588-957d-bea695dc9726", "checked_at": "2026-06-29 09:49:39.486491+02" }, "summary": "frankenspalter.ch: 14 sichtbare Technik-/Anbietersignale, 2 mit hoher Datenschutzrelevanz, 1 CMS-/Shop-Hinweis(e).", "metrics": { "technology_count": 14, "high_privacy_relevance_count": 2, "cms_or_shop_count": 1, "external_script_count": 0, "request_count": 105, "third_party_domain_count": 9, "infrastructure_finding_count": 1 }, "signals": { "server_header": "nginx", "generator": "", "x_powered_by": "", "asset_hosts": [ "www.frankenspalter.ch", "image.frankenspalter.ch", "frankenspalterest.zendesk.com", "ekr.zdassets.com" ], "external_scripts": [], "tls_version": "TLSv1.3", "certificate_issuer": "YE1", "renderer": "playwright-chromium" }, "category_counts": { "Analytics/Werbung": 2, "Hosting/CDN": 1, "Server": 2, "JavaScript": 1, "Shop": 1, "session_replay": 1, "other": 6 }, "technologies": [ { "id": "google_analytics", "name": "Google Analytics", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Signal: google-analytics.com" ], "source": "technology_analysis" }, { "id": "google_tag_manager", "name": "Google Tag Manager", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Signal: googletagmanager.com" ], "source": "technology_analysis" }, { "id": "cloudflare", "name": "Cloudflare", "category": "hosting_cdn", "category_label": "Hosting/CDN", "confidence": "high", "risk_score": 42, "privacy_relevance": "niedrig", "evidence": [ "Signal: cloudflare" ], "source": "technology_analysis" }, { "id": "nginx", "name": "nginx", "category": "server", "category_label": "Server", "confidence": "medium", "risk_score": 42, "privacy_relevance": "niedrig", "evidence": [ "Server-Header: nginx" ], "source": "technology_analysis" }, { "id": "server_header", "name": "nginx", "category": "server", "category_label": "Server", "confidence": "medium", "risk_score": 42, "privacy_relevance": "niedrig", "evidence": [ "Server-Header: nginx" ], "source": "technology_signals" }, { "id": "alpine.js", "name": "Alpine.js", "category": "js_framework", "category_label": "JavaScript", "confidence": "high", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "Signal: x-data=" ], "source": "technology_analysis" }, { "id": "magento", "name": "Magento", "category": "ecommerce", "category_label": "Shop", "confidence": "high", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "Signal: magento" ], "source": "technology_analysis" }, { "id": "provider_microsoft_clarity", "name": "Microsoft Clarity", "category": "session_replay", "category_label": "session_replay", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "scripts.clarity.ms", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_api.frankenspalter.ch", "name": "api.frankenspalter.ch", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "api.frankenspalter.ch", "2 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_ekr.zdassets.com", "name": "ekr.zdassets.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "ekr.zdassets.com", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_frankenspalterest.zendesk.com", "name": "frankenspalterest.zendesk.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "frankenspalterest.zendesk.com", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_image.frankenspalter.ch", "name": "image.frankenspalter.ch", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "image.frankenspalter.ch", "43 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_static.zdassets.com", "name": "static.zdassets.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "static.zdassets.com", "4 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_v2.zopim.com", "name": "v2.zopim.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "v2.zopim.com", "1 Request(s)" ], "source": "browser_analysis" } ], "operator_actions": [ { "id": "action_google_analytics", "technology": "Google Analytics", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/frankenspalter.ch" }, { "id": "action_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/frankenspalter.ch" }, { "id": "action_cloudflare", "technology": "Cloudflare", "priority": "mittel", "owner": "IT/Security/Vendor Owner", "action": "Hosting/CDN, TLS, E-Mail-Schutz, Security-Header, CAA/DMARC und Anbieterrolle mit AVV/DPA/TOM-Nachweis prüfen.", "guide_url": "https://saferpage.de/anbieter/frankenspalter.ch" }, { "id": "action_nginx", "technology": "nginx", "priority": "mittel", "owner": "IT/Security/Vendor Owner", "action": "Hosting/CDN, TLS, E-Mail-Schutz, Security-Header, CAA/DMARC und Anbieterrolle mit AVV/DPA/TOM-Nachweis prüfen.", "guide_url": "https://saferpage.de/anbieter/frankenspalter.ch" }, { "id": "action_server_header", "technology": "nginx", "priority": "mittel", "owner": "IT/Security/Vendor Owner", "action": "Hosting/CDN, TLS, E-Mail-Schutz, Security-Header, CAA/DMARC und Anbieterrolle mit AVV/DPA/TOM-Nachweis prüfen.", "guide_url": "https://saferpage.de/anbieter/frankenspalter.ch" }, { "id": "action_alpine.js", "technology": "Alpine.js", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" }, { "id": "action_magento", "technology": "Magento", "priority": "mittel", "owner": "Webbetrieb/IT", "action": "CMS, Themes, Plugins und sichtbare Versionshinweise aktualisieren, unnötige Plugins entfernen und Re-Scan nach Deployment ausführen.", "guide_url": "https://saferpage.de/guides/sichtbare-versionen-und-cves-beheben" }, { "id": "action_provider_microsoft_clarity", "technology": "Microsoft Clarity", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" }, { "id": "action_provider_api.frankenspalter.ch", "technology": "api.frankenspalter.ch", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" }, { "id": "action_provider_ekr.zdassets.com", "technology": "ekr.zdassets.com", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" } ], "cms_playbooks": [ { "id": "generic", "platform": "Allgemeines Website-Deployment", "summary": "Im passiven Check wurde kein eindeutiges CMS erkannt. Trotzdem sollten Betreiber Release, Consent, Drittanbieter, Security-Header und Nachweise wie bei einem CMS-Update behandeln.", "steps": [ "Deployment-Quelle, Hosting/CDN, externe Skripte, Consent-Tool und wichtige Templates inventarisieren.", "Alle nicht notwendigen Drittanbieter vor Einwilligung blockieren und Anbieterzwecke dokumentieren.", "Security-Header, HTTPS/HSTS, Referrer-Policy, CSP und Cookie-Attribute prüfen.", "Nach Änderungen Re-Scan, Screenshot, JSON/CSV und Fix-Guides ablegen." ], "acceptance": [ "Release-Änderung ist nachvollziehbar.", "Drittanbieter-/Cookie-Abgleich ist aktualisiert.", "Re-Scan und Nachweise sind verlinkt." ], "owner": "Webbetrieb/IT/Datenschutz", "guide_url": "https://saferpage.de/guides/cms-plugin-patchstand-nachweisen", "rescan_url": "https://saferpage.de/?url=frankenspalter.ch" } ], "infrastructure": { "risk_level": "low", "positive_signals": [ "Mehrere IP-Adressen gefunden: Hinweis auf redundante Infrastruktur oder CDN.", "IPv6 ist vorhanden.", "Moderne TLS-Version aktiv: TLSv1.3.", "HSTS ist aktiv.", "DMARC ist für die Domain vorhanden." ], "findings": [ { "id": "caa_missing", "title": "CAA-Record fehlt", "public": true, "category": "dns", "severity": "info", "recommendation": "Optional CAA setzen, um erlaubte Zertifikatsaussteller festzulegen." } ] }, "links": { "technology_center": "https://saferpage.de/technik/frankenspalter.ch", "json": "https://saferpage.de/technik/frankenspalter.ch/export", "csv": "https://saferpage.de/technik/frankenspalter.ch/export-csv", "markdown": "https://saferpage.de/technik/frankenspalter.ch/stack-md", "report": "https://saferpage.de/frankenspalter.ch", "vendors": "https://saferpage.de/anbieter/frankenspalter.ch", "consent": "https://saferpage.de/consent/frankenspalter.ch", "findings": "https://saferpage.de/befunde/frankenspalter.ch", "evidence": "https://saferpage.de/nachweise/frankenspalter.ch" }, "disclaimer": "Technik-Erkennung ist passiv: SaferPage wertet sichtbare Header, HTML-, Script-, Asset- und Browserkontakte aus. Nicht sichtbare Servertechnik, interne Plugins und Logins werden nicht behauptet." }