vtg.de
HTML metadata
Technology
- Server
- Apache
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (5)
- cxppusa1formui01cdnsa01-endpoint.azureedge.net×1
- px.ads.linkedin.com×1
- web.cmp.usercentrics.eu×1
- www.google.com×1
- www.vtg.com×1
Social
Registration
- Updated
- 2025-02-18
- Name servers
-
- ns1.domaindiscount24.net.
- ns2.domaindiscount24.net.
- ns3.domaindiscount24.net.
DNS records live
- NS
-
- ns1.domaindiscount24.net
- ns2.domaindiscount24.net
- ns3.domaindiscount24.net
- MX
-
- 0 vtg-de.mail.protection.outlook.com
- TXT
-
MS=ms77695231
Email authentication partial
- SPF
-
v=spf1 mx ip4:91.208.191.118 ip4:91.208.191.119 a:mailout1.vtg.com a:mailout2.vtg.com include:spf.protection.outlook.com include:amazonses.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none; pct=100; rua=mailto:dmarc-rua-reports@vtg.com; ruf=mailto:dmarc-ruf-reports@vtg.com; adkim=s; aspf=rpolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7RAUgMqYgQCYDWten3Y7n0P5ENC4+R2iKmLlUXoL/S7fWKn374ppRTc3Gu+htFNm14kL1IXUpv34a… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hiQO2Icclw4uTveNNmIKSzbIHS5n2Hxry3RYXmdfAUPWeSOxrS4+8/QZTEYbbr+zI8LA3cBG9TV9f…
selectors probed - selector1:
Certificate (current)
E8
Expires in 35 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.usercentrics.eu matomo.vtg.com matomo-approval.vtg.com charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com www.google.com www.gstatic.com fonts.gstatic.com api.stream24.net hmmh.scnem.com www.w3.org cdn.linkedin.oribi.io 128.30.52.100 px.ads.linkedin.com assets-eur.mkt.dynamics.com cxppusa1formui01cdnsa01-endpoint.azureedge.net public-eur.mkt.dynamics.com *.elfsight.com *.elfsightcdn.com; script-src 'nonce-4a089843d7b18b04184edbf427cb9f88c68c95f6f6ae42117b8bffab4047db1d' 'self' 'strict-dynamic' 'sha256-LujB7VaRzUmGIpK9ASC585xgYXQ3VAQEaXp0HGk+NNY='; style-src 'self' 'unsafe-inline' charts3.equitystory.com fonts.googleapis.com; frame-src 'self' vtg.com www.vtg.com vtg.de www.vtg.de test.vtg.com test.vtg.de charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com fonts.gstatic.com www.google.com www.gstatic.com api.stream24.net www.youtube.com www.youtube-nocookie.com hmmh.s- strict-transport-security
max-age=31536000