indexo.dev

volkswagen.fi

.fi crawl

First seen 2026-05-29 · Last seen 2026-05-31 · ok HTTP/1.1 200 375 ms crawled 2026-05-31

US · 75.2.48.58 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Volkswagen Suomi
Description
Volkswagenin laajasta mallistosta löydät laadukkaat, mukavat ja tilavat henkilöautot ja hyötyautot. Hybridit, sähköautot ja muut voimalinjat. Tutustu.
Language
fi
Canonical
https://www.volkswagen.fi/fi.html

Open Graph

url
https://www.volkswagen.fi
title
Volkswagen Suomi
description
Volkswagenin laajasta mallistosta löydät laadukkaat, mukavat ja tilavat henkilö- ja hyötyautot.

Technology

CMS
Gatsby

Third-party hosts loaded (4)

  • assets.volkswagen.com×18
  • vw-tam.lighthouselabs.eu×2
  • feature-services.vwonehub.io×1
  • v1-539-7.mofa.feature-app.io×1

Social

DNS records live

NS
  • ns-fi.elisa.net
  • ns-se.elisa.net
MX
  • 0 volkswagen-fi.mail.protection.outlook.com
TXT
Show 4 TXT records
  • _dnsauth.huoltotest.volkswagen.fi _hj6flnemua4rppmwu0t6w8r9yv18zl6.
  • _dnsauth.huolto.volkswagen.fi _b7gwq9n1rfhjeypchk1wr7o2ijoyucg.
  • amazonses:BJ958ZlGuNbauW0LunE1CUvI5rmDd9fNJfMtzvVG6bQ=
  • CNAME @ value: MS=ms15584139 TTL=1h
Verified for
  • Adobe
  • Google
  • Meta

Email authentication partial

SPF
v=spf1 a:smtp.vv-autotalot.fi include:spf.protection.outlook.com include:spf.mailjet.com include:spf.mandrillapp.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:cjhvxmcd@rua.eu.dmarcmanager.app
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDi1U53MQpvsC5cvE/sIjevYC7KsFLJxIEnWBqxgYD2t1kWi7E2I3jkGIb7a9OVpiCSNr+nxoIYHj1ylfsgY9…
selectors probed

Certificate (current)

Amazon RSA 2048 M04
from 2025-07-19 to 2026-08-17
Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.volkswagen.fi/fi.html

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
DENY
x-content-type-options
nosniff
content-security-policy
default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src * data: blob: ; base-uri 'self'; upgrade-insecure-requests; font-src https: 'unsafe-inline' data: 'unsafe-inline'; worker-src * blob:;
strict-transport-security
max-age=31536000

Links to (4)

Linked from (2)