volkswagen.it
HTML metadata
Technology
- CMS
- Gatsby
Third-party hosts loaded (6)
- assets.volkswagen.com×17
- feature-services.vwonehub.io×1
- smartsignals2.smart-digital-solutions.de×1
- v1-539-7.mofa.feature-app.io×1
- v3-114-0.gsl.feature-app.io×1
- vw-tam.lighthouselabs.eu×1
Social
Contact
- Phone
- Address
- Viale G.R. Gumpert, 37137, Verona, Verona, IT
DNS records live
- NS
-
- ns.abdns.biz
- ns.abdns.eu
- ns.abdns.info
- MX
-
- 10 volkswagen-it.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 ip4:193.109.74.18 ip4:193.109.74.19 ip4:193.109.74.20 ip4:193.109.74.30 ip4:194.114.62.64/27 ip4:194.114.62.208/28 include:spf.protection.outlook.com ip4:80.74.184.0/24 ip4:91.198.139.128/26 include:_spf.salesforce.com include:_spf.vwgroup.com include:_spf.qualtrics.com include:xplants.net include:_spf.alchemer.eu -allstrict (-all) - DMARC
-
v=DMARC1; p=none; pct=100; rua=mailto:dmarc-aggregatereport@porscheinformatik.com; ruf=mailto:dmarc-forensikreport@porscheinformatik.compolicy: none (monitoring only) - DKIM
-
- s1:
v=DKIM1; h=sha256; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCUKVoe1wgQ1xMquc6FbOYwheCIAAvlPHL+Oq3ZsyURS5Sr/AbwobsgcNqw+rUwzW… - s2:
v=DKIM1; h=sha256; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkrTLr1XF6eWuB4MQB0QRyHhabb8YItabIuUNcf5bju4VkxpS07M1M9VuqM/HLyhC…
selectors probed - s1:
Certificate (current)
Amazon RSA 2048 M04
Expires in 74 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src * data: blob: ; base-uri 'self'; upgrade-insecure-requests; font-src https: 'unsafe-inline' data: 'unsafe-inline'; worker-src * blob:;- strict-transport-security
max-age=31536000