groupfleet.com

HTML metadata

Title

Volkswagen Group | FleetHub

Description

Online magazine for Fleet managers

Language

de-DE

Generator

WPML ver:4.8.6 stt:1,3;

Canonical

https://www.groupfleet.com/de/

Translations

de
en

Open Graph

url: https://www.groupfleet.com/de/
title: Volkswagen Group | FleetHub
locale: de_DE
site name: Volkswagen Group | FleetHub
description: Online magazine for Fleet managers

Technology

Server: Apache
CMS: WordPress 4.8.6 outdated (current 6.8)
jQuery: 3.7.1

Social

Registration

Registrar

1API GmbH

Created

2012-08-23

Expires

2026-08-23 94 days left

Updated

2025-11-22

Name servers

dnsglb1.vwfsag.de
dnsglb2.vwfs.net

DNS records live

NS

dnsglb1.vwfsag.de
dnsglb2.vwfs.net

MX

10 mx01.vwfs.com
10 mx02.vwfs.com
10 mx03.vwfs.com
10 mx04.vwfs.com

TXT

v=DMARC1; p=reject;
zscaler-verification-9382839-10272025-u5932

Verified for

Microsoft 365

Email authentication strong

SPF: v=spf1 ip4:185.60.96.64/29 ip4:185.60.97.64/29 include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:volkswagenfs@rua.netcraft.com; ruf=mailto:volkswagenfs@ruf.netcraft.com
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

DigiCert QuoVadis 2G3 TLS RSA4096 SHA384 2023 CA1

from 2025-12-12 to 2026-12-12

Expires in 205 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.groupfleet.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: deny
permissions-policy: accelerometer=(), autoplay=(self), camera=(), encrypted-media=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), usb=(), interest-cohort=(), private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
x-content-type-options: nosniff
content-security-policy: default-src 'none'; img-src *; script-src 'self' https://www.google.com wpml.org hcaptcha.com newassets.hcaptcha.com www.youtube-nocookie.com fleethub.statistics.lattke.de d388ydkifk0q6s.cloudfront.net 'unsafe-inline'; style-src 'self' wpml.org hcaptcha.com newassets.hcaptcha.com www.youtube-nocookie.com fleethub.statistics.lattke.de d388ydkifk0q6s.cloudfront.net 'unsafe-inline'; font-src 'self' wpml.org hcaptcha.com newassets.hcaptcha.com www.youtube-nocookie.com fleethub.statistics.lattke.de d388ydkifk0q6s.cloudfront.net data:; object-src 'none'; frame-src 'self' wpml.org hcaptcha.com newassets.hcaptcha.com www.youtube-nocookie.com fleethub.statistics.lattke.de d388ydkifk0q6s.cloudfront.net; connect-src 'self' wpml.org hcaptcha.com newassets.hcaptcha.com www.youtube-nocookie.com fleethub.statistics.lattke.de d388ydkifk0q6s.cloudfront.net; media-src 'self' wpml.org hcaptcha.com newassets.hcaptcha.com www.youtube-nocookie.com fleethub.statistics.lattke.de d388ydkifk0q6s.cloudfront.net;
strict-transport-security: max-age=31536000; includeSubDomains