ScanBell technical evidence
Fresh-browser consent-state observations prepared for engineering and privacy review.
No cookie values, browser-storage values, IP addresses, user agents, credentials, or authenticated content are included.
| Page | Score | Critical/high | Findings | Completed states |
|---|---|---|---|---|
https://www.example.test/ | 48 | 2 | 2 | 3/3 |
https://www.example.test/pricing | 48 | 2 | 2 | 3/3 |
https://www.example.test/contact | 100 | 0 | 0 | 3/3 |
00000000-0000-4000-8000-000000000001| State | Completed | Consent controls | Reject action | Requests | Cookies | Tracker domains |
|---|---|---|---|---|---|---|
| Default | Yes | accept, reject, manage | — | 2 | 1 | analytics.example.test |
| Reject | Yes | accept, reject, manage | found; clicked | 2 | 1 | analytics.example.test |
| Accept | Yes | accept, reject, manage | — | 2 | 1 | analytics.example.test |
A recognized analytics request was observed in the fresh default visit before any consent interaction.
Request: analytics.example.test (example-analytics)Recommended check: Confirm the request purpose and delay the tag until the visitor has made the relevant choice.
The automated reject control was found and clicked, but the same recognized analytics request remained observable in the fresh reject state.
Request: analytics.example.test (example-analytics)Recommended check: Review CMP-to-tag consent requirements, publish the corrected container, and rerun this URL in a clean browser context.
00000000-0000-4000-8000-000000000002| State | Completed | Consent controls | Reject action | Requests | Cookies | Tracker domains |
|---|---|---|---|---|---|---|
| Default | Yes | accept, reject, manage | — | 2 | 1 | analytics.example.test |
| Reject | Yes | accept, reject, manage | found; clicked | 2 | 1 | analytics.example.test |
| Accept | Yes | accept, reject, manage | — | 2 | 1 | analytics.example.test |
A recognized analytics request was observed in the fresh default visit before any consent interaction.
Request: analytics.example.test (example-analytics)Recommended check: Confirm the request purpose and delay the tag until the visitor has made the relevant choice.
The automated reject control was found and clicked, but the same recognized analytics request remained observable in the fresh reject state.
Request: analytics.example.test (example-analytics)Recommended check: Review CMP-to-tag consent requirements, publish the corrected container, and rerun this URL in a clean browser context.
00000000-0000-4000-8000-000000000003| State | Completed | Consent controls | Reject action | Requests | Cookies | Tracker domains |
|---|---|---|---|---|---|---|
| Default | Yes | accept, reject, manage | — | 1 | 0 | None observed |
| Reject | Yes | accept, reject, manage | found; clicked | 1 | 0 | None observed |
| Accept | Yes | accept, reject, manage | — | 1 | 0 | None observed |
No scored findings were produced for this automated run.
One rerun of the same URLs is included through 2026-08-08T11:15:00.000Z. Compare the new scan IDs and timestamps with this pack after remediation or deployment.
Results reflect the network location, browser build, timing window, and page state at the recorded timestamps. Geo-targeting, experiments, delayed tags, authenticated flows, and controls the automation could not identify may change what another visitor observes. Findings should be reviewed by the responsible engineering and privacy teams.