{ "schema": "https://saferpage.de/schemas/technology-detection.v1", "generated_at": "2026-06-19T19:10:18+00:00", "domain": "kurzurlaub.de", "available": true, "scan": { "id": "0a2aac86-ed45-4512-8a62-49db72ff63f3", "checked_at": "2026-06-19 15:29:24.105843+02" }, "summary": "kurzurlaub.de: 17 sichtbare Technik-/Anbietersignale, 7 mit hoher Datenschutzrelevanz, 0 CMS-/Shop-Hinweis(e).", "metrics": { "technology_count": 17, "high_privacy_relevance_count": 7, "cms_or_shop_count": 0, "external_script_count": 0, "request_count": 75, "third_party_domain_count": 7, "infrastructure_finding_count": 1 }, "signals": { "server_header": "Google Frontend", "generator": "", "x_powered_by": "", "asset_hosts": [ "www.kurzurlaub.de", "googleads.g.doubleclick.net", "bat.bing.com", "www.google.com", "www.google.de", "www.google-analytics.com", "connect.facebook.net", "www.googleadservices.com", "use.typekit.net", "p.typekit.net", "cdn.jsdelivr.net", "cdn.kurzurlaub.de" ], "external_scripts": [], "tls_version": "TLSv1.3", "certificate_issuer": "WR3", "renderer": "playwright-chromium" }, "category_counts": { "Werbung": 1, "Analytics/Werbung": 5, "tag_manager": 1, "Server": 2, "Consent": 1, "other": 5, "JavaScript": 1, "Bibliothek": 1 }, "technologies": [ { "id": "provider_google_adsense", "name": "Google AdSense", "category": "advertising", "category_label": "Werbung", "confidence": "browser", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "pagead2.googlesyndication.com", "3 Request(s)" ], "source": "browser_analysis" }, { "id": "google_analytics", "name": "Google Analytics", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Signal: google-analytics.com", "Script-Domain: google-analytics.com" ], "source": "technology_analysis" }, { "id": "google_doubleclick", "name": "Google DoubleClick", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Script-Domain: doubleclick.net" ], "source": "technology_analysis" }, { "id": "google_tag_manager", "name": "Google Tag Manager", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "medium", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Signal: gtm-" ], "source": "technology_analysis" }, { "id": "provider_google_tag_manager", "name": "Google Tag Manager", "category": "tag_manager", "category_label": "tag_manager", "confidence": "browser", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "googletagmanager.com", "3 Request(s)" ], "source": "browser_analysis" }, { "id": "tracking_google_tag_manager", "name": "Google Tag Manager", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "google_tag_manager", "gtm-clickname" ], "source": "privacy_analysis" }, { "id": "meta_facebook_pixel", "name": "Meta/Facebook Pixel", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Script-Domain: connect.facebook.net" ], "source": "technology_analysis" }, { "id": "google", "name": "Google", "category": "server", "category_label": "Server", "confidence": "medium", "risk_score": 58, "privacy_relevance": "mittel", "evidence": [ "Server-Header: Google Frontend" ], "source": "technology_analysis" }, { "id": "server_header", "name": "Google Frontend", "category": "server", "category_label": "Server", "confidence": "medium", "risk_score": 58, "privacy_relevance": "mittel", "evidence": [ "Server-Header: Google Frontend" ], "source": "technology_signals" }, { "id": "usercentrics", "name": "Usercentrics", "category": "consent", "category_label": "Consent", "confidence": "medium", "risk_score": 58, "privacy_relevance": "mittel", "evidence": [ "Signal: usercentrics" ], "source": "technology_analysis" }, { "id": "provider_cdn.kurzurlaub.de", "name": "cdn.kurzurlaub.de", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 42, "privacy_relevance": "niedrig", "evidence": [ "cdn.kurzurlaub.de", "39 Request(s)" ], "source": "browser_analysis" }, { "id": "alpine.js", "name": "Alpine.js", "category": "js_framework", "category_label": "JavaScript", "confidence": "high", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "Signal: x-data=" ], "source": "technology_analysis" }, { "id": "tailwind_css", "name": "Tailwind CSS", "category": "library", "category_label": "Bibliothek", "confidence": "medium", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "Signal: tw-" ], "source": "technology_analysis" }, { "id": "provider_bat.bing.com", "name": "bat.bing.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "bat.bing.com", "2 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_bat.bing.net", "name": "bat.bing.net", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "bat.bing.net", "3 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_ssx.kurzurlaub.de", "name": "ssx.kurzurlaub.de", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "ssx.kurzurlaub.de", "2 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_trck.spoteffects.net", "name": "trck.spoteffects.net", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "trck.spoteffects.net", "1 Request(s)" ], "source": "browser_analysis" } ], "operator_actions": [ { "id": "action_provider_google_adsense", "technology": "Google AdSense", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_google_analytics", "technology": "Google Analytics", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_google_doubleclick", "technology": "Google DoubleClick", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_provider_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_tracking_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_meta_facebook_pixel", "technology": "Meta/Facebook Pixel", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/kurzurlaub.de" }, { "id": "action_google", "technology": "Google", "priority": "mittel", "owner": "IT/Security/Vendor Owner", "action": "Hosting/CDN, TLS, E-Mail-Schutz, Security-Header, CAA/DMARC und Anbieterrolle mit AVV/DPA/TOM-Nachweis prüfen.", "guide_url": "https://saferpage.de/anbieter/kurzurlaub.de" }, { "id": "action_server_header", "technology": "Google Frontend", "priority": "mittel", "owner": "IT/Security/Vendor Owner", "action": "Hosting/CDN, TLS, E-Mail-Schutz, Security-Header, CAA/DMARC und Anbieterrolle mit AVV/DPA/TOM-Nachweis prüfen.", "guide_url": "https://saferpage.de/anbieter/kurzurlaub.de" }, { "id": "action_usercentrics", "technology": "Usercentrics", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" } ], "cms_playbooks": [ { "id": "generic", "platform": "Allgemeines Website-Deployment", "summary": "Im passiven Check wurde kein eindeutiges CMS erkannt. Trotzdem sollten Betreiber Release, Consent, Drittanbieter, Security-Header und Nachweise wie bei einem CMS-Update behandeln.", "steps": [ "Deployment-Quelle, Hosting/CDN, externe Skripte, Consent-Tool und wichtige Templates inventarisieren.", "Alle nicht notwendigen Drittanbieter vor Einwilligung blockieren und Anbieterzwecke dokumentieren.", "Security-Header, HTTPS/HSTS, Referrer-Policy, CSP und Cookie-Attribute prüfen.", "Nach Änderungen Re-Scan, Screenshot, JSON/CSV und Fix-Guides ablegen." ], "acceptance": [ "Release-Änderung ist nachvollziehbar.", "Drittanbieter-/Cookie-Abgleich ist aktualisiert.", "Re-Scan und Nachweise sind verlinkt." ], "owner": "Webbetrieb/IT/Datenschutz", "guide_url": "https://saferpage.de/guides/cms-plugin-patchstand-nachweisen", "rescan_url": "https://saferpage.de/?url=kurzurlaub.de" } ], "infrastructure": { "risk_level": "low", "positive_signals": [ "Moderne TLS-Version aktiv: TLSv1.3.", "HSTS ist aktiv.", "DMARC ist für die Domain vorhanden." ], "findings": [ { "id": "caa_missing", "title": "CAA-Record fehlt", "public": true, "category": "dns", "severity": "info", "recommendation": "Optional CAA setzen, um erlaubte Zertifikatsaussteller festzulegen." } ] }, "links": { "technology_center": "https://saferpage.de/technik/kurzurlaub.de", "json": "https://saferpage.de/technik/kurzurlaub.de/export", "csv": "https://saferpage.de/technik/kurzurlaub.de/export-csv", "markdown": "https://saferpage.de/technik/kurzurlaub.de/stack-md", "report": "https://saferpage.de/kurzurlaub.de", "vendors": "https://saferpage.de/anbieter/kurzurlaub.de", "consent": "https://saferpage.de/consent/kurzurlaub.de", "findings": "https://saferpage.de/befunde/kurzurlaub.de", "evidence": "https://saferpage.de/nachweise/kurzurlaub.de" }, "disclaimer": "Technik-Erkennung ist passiv: SaferPage wertet sichtbare Header, HTML-, Script-, Asset- und Browserkontakte aus. Nicht sichtbare Servertechnik, interne Plugins und Logins werden nicht behauptet." }