indexo.dev

oneshader.net

.net crawl

First seen 2026-05-30 · Last seen 2026-05-30 · ok HTTP/1.1 200 210 ms crawled 2026-05-31

NL · 136.144.135.97 · AS20857 Signet B.V.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
OneShader
Description
The online shader editor. Create and share real-time procedural art with just one WebGL shader. Joy is in the craft.
Language
en
Feeds

Open Graph

url
https://oneshader.net/
title
OneShader
site name
OneShader
description
The online shader editor. Create and share real-time procedural art with just one WebGL shader. Joy is in the craft.

Technology

Server
Apache
jQuery
3.5.1

Social

Registration

Registrar
Key-Systems GmbH
Created
2019-02-12
Expires
2027-02-12 255 days left
Updated
2026-02-13
Name servers
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu

DNS records live

NS
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu
MX
  • 10 oneshader.net
Verified for
  • Google

Email authentication weak

SPF
v=spf1 a:oneshader.net ip4:136.144.135.97 ip6:2a01:7c8:fff7:218:5054:ff:fe95:8b5c include:_spf.transip.email ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-23 to 2026-08-21
Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://oneshader.net/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' data://*; worker-src 'self' blob:; font-src 'self'; style-src-elem 'self' 'unsafe-inline'; object-src 'none';

Links to (3)

Linked from (1)