loser.de
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Registration
- Updated
- 2025-04-28
- Name servers
-
- ns1.telekom.net.
- pns.dtag.de.
DNS records live
- NS
-
- ns1.telekom.net
- pns.dtag.de
- MX
-
- 10 portal.loser.de
- TXT
-
knowbe4-site-verification=01c48784d926caf75470b29d5c6c7f3c
- Verified for
-
- Microsoft 365
- Smartsheet
Email authentication partial
- SPF
-
v=spf1 mx ip4:212.185.85.32/29 ip4:213.160.30.216/29 ip4:213.41.21.32/27 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:administrator@loser.depolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 157 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self' 'unsafe-inline' *.loser.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.loser.de https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://*.googletagmanager.com https://*.google-analytics.com; img-src 'self' data: *.loser.de https://*.googletagmanager.com; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.loser.de https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-src 'self' https://www.youtube-nocookie.com;- strict-transport-security
max-age=31536000; includeSubDomains