volkswagen.se

HTML metadata

Title: Volkswagen Sverige - Officiell webbplats | Volkswagen.se
Description: Välkommen till Volkswagen Sverige. Upptäck våra modeller, bygg din egen VW, hitta service, biltillbehör, VW-återförsäljare och de senaste nyheterna.
Language: sv
Canonical: https://www.volkswagen.se/sv.html

Open Graph

url: https://www.volkswagen.se/sv.html
title: Volkswagen Sverige - Officiell webbplats | Volkswagen.se
description: Välkommen till Volkswagen Sverige. Upptäck våra modeller, bygg din egen VW, hitta service, biltillbehör, VW-återförsäljare och de senaste nyheterna.

Technology

CMS: Gatsby

Third-party hosts loaded (7)

assets.volkswagen.com×25
feature-services.vwonehub.io×1
smartsignals2.smart-digital-solutions.de×1
v1-539-7.mofa.feature-app.io×1
v2-146-0.forms.dcc.feature-app.io×1
v3-115-2.gsl.feature-app.io×1
vw-tam.lighthouselabs.eu×1

Social

DNS records live

NS

dns01.dipcon.com
dns02.ports.se
dns03.ports.se
dns04.ports.net

MX

10 volkswagen-se.mail.protection.outlook.com

TXT

7IvTPghKARqz34apYVNWu53cDsemO4KdgodL0kBKdeg5lgXGGzX4rC1QXdvX75fWsMGxSvzJHbHF9UYamrbYSQ==

Verified for

Adobe
Atlassian
Google
Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:193.182.2.80 ip4:193.182.2.138 include:spf.c5mail.com include:mail.cetrez.net include:_spf.salesforce.com include:spf.topdesk.net ip4:188.40.169.122 ip4:212.68.72.114 include:spf.porsche.co.at include:mx249261.internex.at include:mx247964.internex.at include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:dmarc-aggregatereport@porscheinformatik.com; ruf=mailto:dmarc-forensikreport@porscheinformatik.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMpqGqxvh6nZPNPCyLiBs3rLAdpgM7+Zsc9LgDRTYOazy01MtQIG87knkxFSclvoh0J/U42TC9wQyt…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-07-15 to 2026-08-14

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.volkswagen.se/sv.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src * data: blob: ; base-uri 'self'; upgrade-insecure-requests; font-src https: 'unsafe-inline' data: 'unsafe-inline'; worker-src * blob:;
strict-transport-security: max-age=31536000