hmrv.de

.de crawl

First seen 2026-04-13 · Last seen 2026-05-19 · ok HTTP/1.1 200 3140 ms crawled 2026-05-07

DE · 185.190.195.111 · AS206266 HanseMerkur Krankenversicherung AG

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Reiseversicherung der HanseMerkur online buchen
Description: Rundum gut versichert: Optimaler Reiseschutz mit der HanseMerkur Reiseversicherung ☀️Top-Service ✔️ In wenigen Minuten online buchbar ✔️.
Language: de-DE
Canonical: https://www.hmrv.de/

Open Graph

url: https://www.hmrv.de/
title: HanseMerkur
description: Rundum gut versichert: Optimaler Reiseschutz mit der HanseMerkur Reiseversicherung ☀️Top-Service ✔️ In wenigen Minuten online buchbar ✔️.

Technology

Server: HM-HCP

Cookie consent

Usercentrics

Third-party hosts loaded (1)

app.usercentrics.eu×1

Social

Contact

Address: st uns wichtig4.7/5861

Registration

Updated

2026-02-19

Name servers

lars.ns.cloudflare.com.
tani.ns.cloudflare.com.

DNS records live

NS

lars.ns.cloudflare.com
tani.ns.cloudflare.com

MX

10 vamail01.hansemerkur.de
10 vamail02.hansemerkur.de
20 vamail03.hansemerkur.de

Email authentication partial

SPF: v=spf1 mx:hansemerkur.de -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-12-10 to 2027-01-11

Expires in 236 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.hmrv.de/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: connect-src 'self' *.tuerchen.com tuerchen.app *.tuerchen.app *.etracker.de *.etracker.com *.usercentrics.eu *.cmp.usercentrics.eu *.novomind.com *.ekomiapps.de *.google.de *.googleadservices.com *.google.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.bing.net *.bing.com *.trbo.com *.quantserve.com *.hansemerkur-vertriebsportal.de *.hansemerkur.de *.fitrockr.com *.heyflow.com *.loyjoy.com *.moin.ai wss://bot.moin.ai *.qualtrics.com *.clarity.ms; default-src 'self'; font-src 'self' data: *.novomind.com font.gstatic.com *.tuerchen.app core.tuerchen.com *.loyjoy.com *.heyflow.cloud *.moin.ai; frame-ancestors 'self' *.hanse-merkur.de newapp.etracker.com app.etracker.com localhost *.hokify.de www.dwin1.com; frame-src 'self' blob: hansemerkur.happymo.re *.usercentrics.eu *.cmp.usercentrics.eu youtube.com *.youtube.com *.youtube-nocookie.com *.novomind.com *.kasko.io *.kaskocloud.com *.google.com *.trbo.com *.facebook.com *.pantumdetect.com *.awin1.com *.hansemerkur.d
strict-transport-security: max-age=31536000; includeSubDomains; preload