vwfs.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-18 · ok HTTP/1.1 200 4433 ms crawled 2026-05-08

DE · 185.60.96.123 · AS205505 Volkswagen Financial Services AG

Reputation 100/100

Classifying

HTML metadata

Title

Volkswagen Financial Services: Angebote für Privatkunden

Description

✔Auto-Finanzierung ✔Auto-Leasing ✔Kfz-Versicherung ✔Garantien & mehr » Informieren Sie sich über unsere Angebote für Privatkunden

Language

Canonical

https://www.vwfs.de/

Translations

Open Graph

site name: Volkswagen Financial Services

Technology

CDN: Amazon CloudFront
Server: CloudFront

Third-party hosts loaded (6)

cms-assets.vwfs.com×31
apikeys.civiccomputing.com×2
cc.cdn.civiccomputing.com×2
cdn.bronson.vwfs.io×2
assets.adobedtm.com×1
cdn3.userzoom.com×1

Social

Contact

Phone

31.05.2026 24

Address

st GmbH, Gifhorner Str. 57, 38112

Registration

Updated

2026-02-13

Name servers

dnsglb1.vwfsag.de.
dnsglb2.vwfs.net.

DNS records live

NS

dnsglb1.vwfsag.de
dnsglb2.vwfs.net

TXT

Show 4 TXT records

facebook-domain-verification=bn5fwfxgy0v8hpawuh8jasb7684s1v
google-site-verification=IqjnQO6hYXQPhs6a7KGez2ND553Qnlu0vaF1u2z1Sa8
trustpilot-one-time-verification-id=b95dd82e-357a-4fd4-9e91-1c2c47b119af
google-site-verification=1oLd7VB1hCyVk2n7DSrN81cPmn6D2nwHstarbG7uCZ8

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:volkswagenfs@rua.netcraft.com; ruf=mailto:volkswagenfs@ruf.netcraft.com
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

DigiCert QuoVadis 2G3 TLS RSA4096 SHA384 2023 CA1

from 2026-01-06 to 2027-01-06

Expires in 232 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vwfs.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.cms.vwfs.tools; img-src 'self' data: https://*.omtrdc.net https://*.demdex.net https://*.scene7.com https://cm.everesttech.net https://dev.day.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://maps.gstatic.com https://*.google.com https://www.google.de https://*.google.de https://*.googlesyndication.com https://*.googleadservices.com https://cm.g.doubleclick.net https://ad.doubleclick.net https://img.youtube.com https://i.ytimg.com https://*.userzoom.com https://*.adform.net https://www.facebook.com https://*.linkedin.com https://snap.licdn.com https://p.adsymptoptic.com https://t23.intelliad.de https://t13.intelliad.de https://t.co https://*.volkswagenbank.de https://cms-assets.vwfs.io https://cms-assets.vwfs.com https://smetrics.vwfs.de https://mediaservice.audi.com https://GISTPAEndpoint-Prod.azureedge.net https://default.vms.vwfs.io https://cdn.bronson.vwfs.tools https://cdn.bronson.vwfs.io https://gateway.zsclou
strict-transport-security: max-age=31536000; includeSubdomains; preload;