volkswagen.pt
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- groupcms-services-api.porsche-holding.com×32
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns1.porscheinformatik.com
- ns2.porscheinformatik.com
- MX
-
- 10 mr1.volkswagen.de
- 10 mr2.volkswagen.de
- 20 mr3.volkswagen.de
- 20 mr4.volkswagen.de
- TXT
-
Show 5 TXT records
QuoVadis=ac53d024-f60c-4e2f-a58f-20256553ce04_r2br7hglxm14lsgq49zc6ctxe20kwz0ri8snirled4u0h7d39vdf4vmlvamazonses:hx/rwa2CFYqmSmpCAe88P4XeY5Po6NM0VRyHpYYeLwA=amazonses:/AucJO6yF9A3QxeXRP5/LuSLgzMbhSO6Dd9oBYfVoLE=
- Verified for
-
- Meta
Email authentication weak
- SPF
-
v=spf1 include:volkswagen.de include:spf.protection.outlook.com include:spf.protection.outlook.de ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 80 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https:; img-src 'self' data: https:; style-src-elem 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src-attr 'unsafe-inline'; font-src 'self' data: https:; frame-ancestors https://volkswagen-admin.porsche-holding.com; connect-src 'self' https: wss: ws: data:; manifest-src 'self' https:; media-src 'self' https: data: blob; frame-src 'self' https:; upgrade-insecure-requests- strict-transport-security
max-age=63072000; includeSubDomains; preload