vwfs.com

HTML metadata

Title

home

Language

de

Canonical

https://www.vwfs.com/

Translations

de
en

Technology

CDN: Amazon CloudFront
Server: CloudFront

Third-party hosts loaded (4)

apikeys.civiccomputing.com×2
cc.cdn.civiccomputing.com×2
cdn.bronson.vwfs.io×2
assets.adobedtm.com×1

Social

Registration

Registrar

1API GmbH

Created

1999-01-29

Expires

2027-01-29 254 days left

Updated

2026-01-30

Name servers

dnsglb1.vwfsag.de
dnsglb2.vwfs.net

DNS records live

NS

dnsglb1.vwfsag.de
dnsglb2.vwfs.net

MX

10 mx01.vwfs.com
10 mx02.vwfs.com
10 mx03.vwfs.com
10 mx04.vwfs.com

TXT

Show 19 TXT records

apple-domain-verification=npCrwPBOm8Y10Yyo
HWNuGxjk405641cBPUlY92ZjHINzSHxOuEnlOnPldrsJxOi0YJyNh6GxIMpnKdS/xtJ3DX++tIZ72J8Oa3OQrw==
google-site-verification=d5X2Jdx2FTh6mBOlrOxHQtUkRXr_ZwPsM4p7O5GVoyg
MS=B956E073A82A1E662A9CB6F905F2FE2623217E0C
Dynatrace-site-verification=69182029-75b5-4e14-901b-bec5fe3c2643__espciepa9edjuh7a4ebe0a7te6
jamf-site-verification=XCfl1YMrfQykl66621xjCg
apple-domain-verification=pF8jV9gbKMEuC0UU
apple-domain-verification=wd9n87mIxk7FhJla
MS=DE2A79CAE5CC75A2B2B5E4D76235A19739E8951E
apple-domain-verification=A8m0BeIUrZUe4idb
apple-domain-verification=ujSRdcEcEdtCqUuu
google-site-verification=LJHXR1PJ7W7BZMHkkbNRmRpAiIHa4nNhz0nqlSXPkWg
atlassian-domain-verification=69s3Fwj1CdVMmwsanabx3gfYRATUSrUwok/wq8faGnGYec0oKa3w2TB5F8psSDro
MS=ms62773521
atlassian-domain-verification=TaDyki/sD2PErtWMV77kckVfM4ktKwPGtSQ1U4y1ZYstefUPgLwPdf3fQxOEJ7B6
facebook-domain-verification=1an5d662k0m58h06bohw6rubmw8zvp
apple-domain-verification=ekvDiCeGYkkTjs0Z
MS=ms88467855
adobe-idp-site-verification=3e2e63dd72d33ffd9f5a85a20952293cf704786db08e7019e9d7dcd708888ba3

Email authentication strong

SPF

v=spf1 ip4:185.60.96.64/29 ip4:185.60.97.64/29 ip4:194.114.62.64/27 ip4:194.114.62.208/28 ip4:195.30.96.68 ip4:195.30.231.225 ip4:188.40.169.112/28 ip4:85.10.243.128/28 ip4:80.242.140.200/29 ip4:80.68.128.18 include:spf.protection.outlook.com include:_spf.mail-connect.net a:spf.ltg.email -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:volkswagenfs@rua.netcraft.com; ruf=mailto:volkswagenfs@ruf.netcraft.com

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM+QbcFgmwFXJz5OsRh6MlKjyCOEeXhKGDTggaZ3v9ZWZQ7c/kR51IfYIVZevgbM5CJYv2tWgy4++niEj8…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUqCarfTbxDzCElDDeMWshww25uWXMMv2Jv3l60ugdNxxm74UwE9Hdg+yoEs6Phv6lWrHuGr1rwnBE7to5…

selectors probed

Certificate (current)

DigiCert QuoVadis 2G3 TLS RSA4096 SHA384 2023 CA1

from 2026-01-06 to 2027-01-06

Expires in 231 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vwfs.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.cms.vwfs.tools; img-src 'self' data: https://*.omtrdc.net https://*.demdex.net https://*.scene7.com https://cm.everesttech.net https://dev.day.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://maps.gstatic.com https://*.google.com https://www.google.de https://*.google.com https://*.googlesyndication.com https://*.googleadservices.com https://cm.g.doubleclick.net https://ad.doubleclick.net https://img.youtube.com https://i.ytimg.com https://*.userzoom.com https://*.adform.net https://www.facebook.com https://*.linkedin.com https://snap.licdn.com https://p.adsymptoptic.com https://t23.intelliad.de https://t13.intelliad.de https://t.co https://*.volkswagenbank.de https://cms-assets.vwfs.io https://cms-assets.vwfs.com https://smetrics.vwfs.com https://mediaservice.audi.com https://GISTPAEndpoint-Prod.azureedge.net https://default.vms.vwfs.io https://cdn.bronson.vwfs.tools https://cdn.bronson.vwfs.io https://gateway.zscl
strict-transport-security: max-age=31536000; includeSubdomains; preload;