indexo.dev

vrworks.de

.de crawl

First seen 2026-04-13 · Last seen 2026-05-11 · ok HTTP/1.1 200 541 ms crawled 2026-05-06

DE · 212.83.35.56 · AS47447 23M GmbH

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title
VR-WORKS - Anmeldung
Description
Mit VR-WORKS steht Ihnen ein Bankportal zur Verfügung, das sich an alle Verantwortlichen unterschiedlicher Funktionsbereiche Ihres Hauses richtet. Marketing ist dabei als marktorientierte Unternehmensführung zu verstehen, was damit nahezu alle Geschäftsbereiche einer Bank betrifft.

Technology

Server
nginx

Contact

Phone

Registration

Updated
2022-06-29
Name servers
  • cns1.cloudpit.de.
  • cns2.cloudpit.com.
  • cns3.cloudpit.io.

DNS records live

NS
  • cns1.cloudpit.de
  • cns2.cloudpit.com
  • cns3.cloudpit.io
MX
  • 10 mail.vrworks.de

Email authentication strong

SPF
v=spf1 a mx a:mail.vrworks.de ip4:212.83.35.56 ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc@vrworks.de; ruf=mailto:dmarc@vrworks.de; fo=1
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDhaI5ihIh+8guVbQNDjnowzRIZ+EMVCwLlKfs9keNxR/FYWBGfgSdmVssbAbB9rtrA4nnT1FpMeQvwrj/pbKG3xjIWH…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-06-11 to 2026-06-19
Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://vrworks.de/login?1

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'nonce-ngpMmrTgoiUJdgVShWhqmIHR' https://sdn.vrworks.de 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://cdn.jsdelivr.net/npm/emoji-picker-element-data@%5E1/ https://cdn.jsdelivr.net/npm/emoji-picker-element@1.26.3/picker.min.js https://sdn.vrworks.de; font-src 'self' data:; object-src 'none'; manifest-src 'self'; media-src 'self'; worker-src 'none'; base-uri 'self'; frame-src 'self' https://www.youtube-nocookie.com
strict-transport-security
max-age=31536000; includeSubDomains
cross-origin-opener-policy
same-origin

Linked from (2)