vtg.com

HTML metadata

Title

VTG: Your partner for sustainable rail transport

Description

VTG is Europe's largest private wagon hire company and your experienced partner when it comes to multimodal logistics services and digital solutions.

Language

en-US

Generator

TYPO3 CMS

Canonical

https://www.vtg.com/

Translations

de-de
en-us

Open Graph

title: Your partner for sustainable rail transport
image:url: https://www.vtg.com/fileadmin/VTG/Bilder/Social_Media_200x200/VTG_Logo.png
description: VTG is Europe's largest private wagon hire company and your experienced partner when it comes to multimodal logistics services and digital solutions.

Technology

Server: Apache

Cookie consent

Usercentrics

Third-party hosts loaded (5)

www.vtg.de×2
cxppusa1formui01cdnsa01-endpoint.azureedge.net×1
px.ads.linkedin.com×1
web.cmp.usercentrics.eu×1
www.google.com×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2003-07-03

Expires

2026-07-03 44 days left

Updated

2025-11-30

Name servers

ns1.domaindiscount24.net
ns2.domaindiscount24.net
ns3.domaindiscount24.net

DNS records live

NS

ns1.domaindiscount24.net
ns2.domaindiscount24.net
ns3.domaindiscount24.net

MX

0 vtg-com.mail.protection.outlook.com

TXT

Show 15 TXT records

docusign=8e215770-9ef1-48a8-8733-e1a2ea37a4d8
1password-site-verification=RVVL5CURUZC2XMCCGKFD3K3IWI
d365mktkey=0OHfbqnevbcWRmQRsnmpAWCjPzxq9Ioas4hqJXxShPsx
miro-verification=7dfc5989cb2cbff6776bd76d34f97b6bf69122fd
have-i-been-pwned-verification=c8f6d4a9bfec706d33929840ce12fccd
google-site-verification=RWt_-puQ2VwsDmlg_9SI6md46DGj2PqywEffHLmUvyg
atlassian-sending-domain-verification=aa17bb21-1751-4e25-acfb-caf37edcd893
asuid.scepman=18348E8563756D04500D40A67113052E5A0FDE9F7A51B8B1612E6AC3F15BE595
atlassian-domain-verification=AaF2LJoSd0zY5jw0aRSrPD0jKiwgjmN9aElivS0aRvgwBduHGuUvGkBgSafGjRLq
MS=ms52736790
2u26m9ujv98ru5g0bt6l90gn5k
uldl9o9i0s7of55usfk087he82
_8kardk0pof0r14gjnsajzpfe4czt14j
asv=82b9684f72ef225f58a900dd7403ee65
apple-domain-verification=zNrwBHtfkgTgtlKH

Email authentication strong

SPF

v=spf1 mx ip4:20.52.171.135 ip4:91.208.191.119 ip4:80.228.246.15 a:mailout1.vtg.com a:mailout2.vtg.com include:eur.pb-dynmktge.com include:spf.protection.outlook.com include:amazonses.com include:_spf.zimpel.de -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:dmarc-rua-reports@vtg.com; ruf=mailto:dmarc-ruf-reports@vtg.com; adkim=s; aspf=r

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk1juEWY9R11TEQIGLJ8Cs9/uz/cyyxKakAMQ4ovCAChhkfUwQmbCWDNF/hU6vO/dJ4a3jHASRGhoB…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ4XH2Cyxh5BLDKY3hr4PmFEmsZk1ni1G/+fiowliuWnhuHtU0tEaGkbwm2dhm9805bIOzxF4sXuPF…

selectors probed

Certificate (current)

E7

from 2026-03-25 to 2026-06-23

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.vtg.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.usercentrics.eu matomo.vtg.com matomo-approval.vtg.com charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com www.google.com www.gstatic.com fonts.gstatic.com api.stream24.net hmmh.scnem.com www.w3.org cdn.linkedin.oribi.io 128.30.52.100 px.ads.linkedin.com assets-eur.mkt.dynamics.com cxppusa1formui01cdnsa01-endpoint.azureedge.net public-eur.mkt.dynamics.com *.elfsight.com *.elfsightcdn.com; script-src 'nonce-04422b699fffffaea99ad16494cc0a2ae72eaa34f4f163c468ed25f1fb7b1906' 'self' 'strict-dynamic' 'sha256-LujB7VaRzUmGIpK9ASC585xgYXQ3VAQEaXp0HGk+NNY='; style-src 'self' 'unsafe-inline' charts3.equitystory.com fonts.googleapis.com; frame-src 'self' vtg.com www.vtg.com vtg.de www.vtg.de test.vtg.com test.vtg.de charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com fonts.gstatic.com www.google.com www.gstatic.com api.stream24.net www.youtube.com www.youtube-nocookie.com hmmh.s
strict-transport-security: max-age=31536000