vrg.de

HTML metadata

Title: VRG - Wir nehmen Ihre IT persönlich.
Description: Software und IT-Lösungen für Ihre HR, die Sozialwirtschaft und die Kommunikation mit Kunden, Lieferanten & Mitarbeitern.
Language: de
Generator: TYPO3 CMS
Canonical: https://vrg.de

Open Graph

title: VRG - Wir nehmen Ihre IT persönlich.
image:url: https://vrg.de/fileadmin/_processed_/e/6/csm_Vorschaubild_VRG_99c170c7d7.jpg
description: Software und IT-Lösungen für Ihre HR, die Sozialwirtschaft und die Kommunikation mit Kunden, Lieferanten & Mitarbeitern.

Technology

Server: VRG
CMS: Joomla

Social widgets

YouTube Embed

Third-party hosts loaded (4)

assets.prd.heyflow.com×1
certificate.softgarden.io×1
consent.cookiebot.eu×1
www.youtube-nocookie.com×1

Social

Contact

Phone

+4944139070

Registration

Updated

2024-10-11

Name servers

dns.vrg.de.
ns2.vrg.de.
pns.dtag.de.

DNS records live

NS

dns.vrg.de
ns2.vrg.de
pns.dtag.de

MX

10 vrg-de.mail.protection.outlook.com

TXT

jetbrains-domain-verification=4gtkafhaa77zpzrnbillcffg8
5cho2oll4fkhrfa1je1hp6af53
sending_domain956942=939bb88d5f3c525d9e19c7ea1c10fd0393a3eaf2f4a04f0bf2cacfdd230dcdae

Verified for

Apple
Google
Microsoft 365
Miro
Smartsheet
TeamViewer

Email authentication strong

SPF

v=spf1 mx ip4:212.184.184.0/25 ip4:62.157.185.0/25 ip4:91.249.145.22/32 include:spf.protection.outlook.com include:aspmx.pardot.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; ruf=mailto:dmarc-ruf@vrg.de; rua=mailto:dmarc-rua@vrg.de; sp=none; adkim=r; aspf=r; fo=1

policy: reject (enforced) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVbCr6cYgCQ1yVIt3trKMcu91viMyCTreQeQXr0y21ipgG81x3rv8xFKiSQq4OEyy8+5c/Z7MGb/UA…
mail: v=DKIM1; k=rsa; h=sha256; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5oqg9K5OiMGvUK0F/cGcNlVaAHsZQNoh4WXNG9iBFaodRdsyEu6B9ci3UKUkGU9Umq0…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2026-03-16 to 2026-10-01

Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://vrg.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), gyroscope=(), camera=(), microphone=(), midi=(), payment=(), usb=(), geolocation=(), autoplay=(self "https://www.youtube.com" "https://www.youtube-nocookie.com" "https://mini-serve.prd.heyflow.com"), encrypted-media=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), fullscreen=*
x-content-type-options: nosniff
content-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://consent.cookiebot.eu https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://scripts.clarity.ms https://b.clarity.ms https://clarity.ms https://www.clarity.ms https://bat.bing.com https://assets.prd.heyflow.com https://mini-serve.prd.heyflow.com https://api.prd.heyflow.com https://friendlycaptcha.com https://cdn.friendlycaptcha.com https://api.friendlycaptcha.com https://www.google.com https://pi.pardot.com https://cdn.pardot.com https://go.vrg-hr.de https://evidenz.de https://seminar-vrg-akademie.vrg.de blob:; script-src-elem 'self' 'unsafe-inline' https://consent.cookiebot.eu https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://www.googletagmanager.com https://www.google-analytic
strict-transport-security: max-age=31536000; includeSubDomains; preload