indexo.dev

turtletoy.net

.net crawl

First seen 2026-05-30 · Last seen 2026-05-30 · ok HTTP/1.1 200 301 ms crawled 2026-05-31

NL · 136.144.135.97 · AS20857 Signet B.V.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Turtletoy
Description
Create plottable hand-coded art online using a JavaScript Turtle graphics API. Joy is in the craft.
Language
en
Feeds

Open Graph

url
https://turtletoy.net/
title
Turtletoy
site name
Turtletoy
description
Create plottable hand-coded art online using a JavaScript Turtle graphics API. Joy is in the craft.

Technology

Server
Apache
jQuery
3.5.1

Social

Registration

Registrar
Key-Systems GmbH
Created
2018-10-20
Expires
2026-10-20 140 days left
Updated
2025-11-29
Name servers
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu

DNS records live

NS
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu
MX
  • 10 mail.turtletoy.net
  • 10 turtletoy.net
Verified for
  • Google

Email authentication strong

SPF
v=spf1 a:turtletoy.net ip4:136.144.135.97 ip6:2a01:7c8:fff7:218:5054:ff:fe95:8b5c include:_spf.transip.email ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:info@turtletoy.net; ruf=mailto:info@turtletoy.net; fo=1
policy: quarantine
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-23 to 2026-08-21
Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://turtletoy.net/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' 'unsafe-inline' data://*; connect-src 'self' ws://*.local ws://localhost:* ws://127.0.0.1:*; worker-src 'self' blob:; font-src 'self'; style-src-elem 'self' 'unsafe-inline'; object-src 'none';

Links to (4)

Linked from (1)