studierendenwerk-stuttgart.de

.de crawl

First seen 2026-04-23 · Last seen 2026-05-19 · ok HTTP/1.1 200 9463 ms crawled 2026-05-16

DE · 217.160.14.64 · AS8560 IONOS SE

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Studierendenwerk | Studierendenwerk Stuttgart

Description

Das Studierendenwerk Stuttgart unterstützt Studierende aus 15 Hochschulen mit Wohnplätzen, Mensen, Kitas, BAföG und Beratungsangeboten.

Language

Generator

TYPO3 CMS

Canonical

https://www.studierendenwerk-stuttgart.de/

Translations

Open Graph

url: https://www.studierendenwerk-stuttgart.de/
title: Studierendenwerk | Studierendenwerk Stuttgart
site name: Studierendenwerk Stuttgart
description: Das Studierendenwerk Stuttgart unterstützt Studierende aus 15 Hochschulen mit Wohnplätzen, Mensen, Kitas, BAföG und Beratungsangeboten.

Technology

Server: nginx

Registration

Updated

2020-08-12

Name servers

ns1099.ui-dns.biz.
ns1099.ui-dns.com.
ns1099.ui-dns.de.
ns1099.ui-dns.org.

DNS records live

NS

ns1099.ui-dns.biz
ns1099.ui-dns.com
ns1099.ui-dns.de
ns1099.ui-dns.org

MX

10 mail.sws-internet.de

Email authentication weak

SPF: v=spf1 include:_spf-eu.ionos.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

ZeroSSL ECC Domain Secure Site CA

from 2026-03-30 to 2026-06-29

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.studierendenwerk-stuttgart.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=*, autoplay=(self), camera=(), display-capture=(self), encrypted-media=(self), fullscreen=*, gamepad=(), geolocation=(), gyroscope=*, hid=(), identity-credentials-get=(self), idle-detection=(self), local-fonts=*, magnetometer=*, microphone=(), midi=*, otp-credentials=(), payment=(), picture-in-picture=*, screen-wake-lock=(), serial=(), storage-access=*, usb=(), web-share=*, window-management=(self), xr-spatial-tracking=(self)
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' *.youtube-nocookie.com *.youtube.com; font-src 'self' *.gstatic.com data:; img-src 'self' i.ytimg.com yt3.ggpht.com data: *.youtube-nocookie.com *.googleapis.com *.google.com *.google.de *.gstatic.com blob:; script-src 'self' *.youtube-nocookie.com *.googleapis.com *.google.com *.google.de *.gstatic.com 'unsafe-inline' 'unsafe-eval'; worker-src *; script-src-elem * 'unsafe-inline' blob:; style-src 'self' *.youtube-nocookie.com *.googleapis.com *.google.com *.google.de 'unsafe-inline'; frame-src 'self' tl1host.eu *.tl1host.eu tl1.eu *.tl1.eu app.cituro.com *.app.cituro.com *.maxmanager.xyz cardservice-sws.cpwas.de *.softgarden.io *.studierendenwerk-stuttgart.de *.youtube-nocookie.com *.youtube.com; connect-src 'self' *.studierendenwerk-stuttgart.de *.googleapis.com *.google.com *.google.de *.youtube-nocookie.com *.youtube.com *.gstatic.com; frame-ancestors 'self' *.studierendenwerk-stuttgart.de *.hochschulen-sw-stuttgart.de *.pausen-service.de *.studi
strict-transport-security: max-age=31536000; includeSubdomains; always