indexo.dev

oakwoodschool.co.uk

.uk crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 11584 ms crawled 2026-05-17

GB · 109.109.139.38 · AS205072 Layershift Limited

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Homepage | Oakwood Prep School
Language
en
Canonical
https://www.oakwoodschool.co.uk/

Technology

Server
Apache
CMS
Drupal
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×1
  • www.googletagmanager.com×1

Social

Contact

Email
Phone
Address
st Sussex PO18 9AN(SatNav PO18 9AL)01243

Registration

Registrar
123-Reg Limited t/a 123-reg
Created
2000-02-10
Expires
2034-02-10 2822 days left
Updated
2025-02-03
Name servers
  • ns19.domaincontrol.com.
  • ns20.domaincontrol.com.

DNS records live

NS
  • ns19.domaincontrol.com
  • ns20.domaincontrol.com
MX
Show 7 MX records
  • 10 aspmx.l.google.com
  • 20 alt1.aspmx.l.google.com
  • 20 alt2.aspmx.l.google.com
  • 30 aspmx2.googlemail.com
  • 30 aspmx3.googlemail.com
  • 30 aspmx4.googlemail.com
  • 30 aspmx5.googlemail.com
TXT
  • c0dlj2t8guffj46l7037jmdmkr
  • cvil8ujh2j50skp4b59hcgv3vr
  • oac9a9m1dqpco98bu1ku6ntjob
Verified for
  • Google
  • Microsoft 365

Email authentication weak

SPF
v=spf1 a mx ip4:109.109.139.38 include:_spf.google.com include:spf.google.com include:spf.mtasv.net ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-23 to 2026-07-22
Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.oakwoodschool.co.uk/

present
  • strict-transport-security
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • short HSTS max-age
  • missing Content Security Policy
  • weak frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
permissions-policy
geolocation=(self), payment=(self)
x-content-type-options
nosniff
strict-transport-security
max-age=5; includeSubDomains
cross-origin-opener-policy
same-origin-allow-popups
cross-origin-embedder-policy
unsafe-none
cross-origin-resource-policy
same-origin

Links to (7)

Linked from (1)