formulastudent.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 12645 ms crawled 2026-05-19

DE · 136.243.78.240 · AS24940 Hetzner Online GmbH

Reputation 100/100

sector education type homepage

HTML metadata

Title: FSG: Formula Student Germany
Language: en
Generator: TYPO3 CMS

Technology

Server: nginx
CMS: Joomla

Social

Registration

Updated

2020-11-10

Name servers

cass.ns.cloudflare.com.
kai.ns.cloudflare.com.

DNS records live

NS

cass.ns.cloudflare.com
kai.ns.cloudflare.com

MX

10 mail.fs-m.org

Verified for

Cisco
Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 mx a:mailout.fsg.one -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:b45d3b0e7e184ef9a8c5a10e7a55f9a6@dmarc-reports.cloudflare.net;

policy: reject (enforced)

DKIM

default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9UvE8ulPxFLsaN0sRsBc9H2Bq LfS97XDil6oLjo56LXTptUGHOS9vIGEHX/IkKJOXRcpmjY5dkIXtySo3SY5/D8Ph…

selectors probed

Certificate (current)

from 2026-04-29 to 2026-07-28

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.formulastudent.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; manifest-src 'self' https://static.formulastudent.de; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.google.com https://stackpath.bootstrapcdn.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://code.jquery.com https://static.formulastudent.de; connect-src 'self' https://127.0.0.1:41951 https://localhost:41951 https://static.formulastudent.de; img-src 'self' 'unsafe-inline' data: https://static.formulastudent.de https://*.tile.openstreetmap.org; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdn.datatables.net https://static.formulastudent.de; font-src 'self' data: https://fonts.gstatic.com https://static.formulastudent.de; child-src 'self' https://www.youtube-nocookie.com https://*.google.com https://*.google.de https://static.formulastudent.de https://cloud.fsg.one https://media.formulastudent.de; frame-src 'self' https://www.youtube-nocookie.com https://*.google.com https://*.google.
strict-transport-security: max-age=31536000; includeSubDomains; preload