vr-bank-mr.de

.de crawl

First seen 2026-05-09 · Last seen 2026-05-15 · ok HTTP/1.1 200 4133 ms crawled 2026-05-15

DE · 195.200.53.238 · AS15590 Atruvia AG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Startseite VR-Bank Main-Rhön eG - VR-Bank Main-Rhön eG
Description: Für uns heißt da sein, auch füreinander da zu sein. Und das geht am besten vor Ort. Erfahren Sie hier mehr über die Leistungen und das Angebot Ihrer VR-Bank Main-Rhön eG.
Language: de-DE
Canonical: https://www.vr-bank-mr.de/startseite.html

Open Graph

url: https://www.vr-bank-mr.de/startseite.html
title: Füreinander da sein
language: de
description: Für uns heißt da sein, füreinander da zu sein – das geht am besten vor Ort.

Technology

Third-party hosts loaded (1)

atruvia.scene7.com×18

Social

Registration

Updated

2025-06-04

Name servers

nsh1.atruvia.de.
nsh2.atruvia.com.
nsh3.atruvia.de.
nsh4.atruvia.com.

DNS records live

NS

nsh1.atruvia.de
nsh2.atruvia.com
nsh3.atruvia.de
nsh4.atruvia.com

MX

Show 8 MX records

20 omail22.gadmail.de
20 omail23.gadmail.de
20 rmail22.gadmail.de
20 rmail23.gadmail.de
30 gmail22.gadmail.de
30 gmail23.gadmail.de
30 wmail22.gadmail.de
30 wmail23.gadmail.de

TXT

D-TRUST=YMNKWB3TRT5YSZ7DEEBN45X
QuoVadis=e37ec642-4ece-4e8d-85b2-f7104459122a

Verified for

Apple
Google
Microsoft 365

Email authentication partial

SPF: v=spf1 include:spf.mailjet.com include:net1.spf.fiduciagad.de ?ip4:80.244.219.130 include:spf.nl2go.com ip4:116.202.200.158 ip6:2a01:4f8:d0a:741a::2 ip4:78.46.2.57 ip6:2a01:4f8:d0a:301f::2 -all
strict (-all)
DMARC: v=DMARC1; p=none; adkim=r; aspf=r
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

D-TRUST SSL Class 3 CA 1 EV 2009

from 2026-04-05 to 2026-10-20

Expires in 153 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vr-bank-mr.de/startseite.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://maps.googleapis.com 'sha256-aSqN2R3jDvHFUL3vVOUtG6OJr1IF+Y31IPMdo0dLU6U=' 'nonce-ba66e3ffc797be4b30d64e0cfcb2de4e' https://*.qualtrics.com https://cdn.cookielaw.org https://assets.adobedtm.com https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://snap.licdn.com https://s.pinimg.com; base-uri 'self'; font-src 'self' https: data:; form-action 'self' https://*.qualtrics.com; frame-src 'self' https://www.youtube-nocookie.com https://79069165.hwgep.module.vr-networld.de https://vra.module.vr-networld.de https://www.ruv-aktion.de https://zuschussguide.vr-bankenportal.de https://www.menti.com https://youtu.be https://www.easycredit.de https://brsp.electronicpublishing.de https://reisebank.de https://hwvsm.module.vr-networld.de https://foerdermittelfinder.vr-bankenportal.de https://www1.meinplus.de https://fincalc
strict-transport-security: max-age=31536000