oakworks.com

HTML metadata

Title: Oakworks, Inc.
Description: With over 45 years of innovation, Oakworks is a global brand manufacturing medical tables, spa tables, massage tables and accessories. We excel in producing safe, durable, and ergonomic wellness equipment, emphasizing comfort for both practitioners and clients while reducing environmental impact.
Language: en

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (3)

oakworks.sirv.com×45
seal.godaddy.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

717-235-6807

Registration

Registrar

GoDaddy.com, LLC

Created

1996-01-31

Expires

2033-02-01 2449 days left

Updated

2026-05-13

Name servers

pdns01.domaincontrol.com
pdns02.domaincontrol.com

DNS records live

NS

pdns01.domaincontrol.com
pdns02.domaincontrol.com

MX

0 oakworks-com.mail.protection.outlook.com

TXT

MS=ms99780918
google-site-verification=yGhbeviaSMRY3WIm6yqxDR0V8iMmTqKbBDkC7qhhwlo

Email authentication strong

SPF

v=spf1 ip4:72.23.112.32/27 ip4:204.140.21.19 ip4:204.140.21.20 mx:oakworks.com include:spf.constantcontact.com include:spf.protection.outlook.com include:spf-us.emailsignatures365.com include:ccsend.com a -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:4dadm@oakworks.com; ruf=mailto:4dadm@oakworks.com; fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3es/feCvBew/hLjXhhbekXNN1MYF2epHs2476xiZTsC2xi+Sw6KtumvimRMA5Jaj4/yEO9EkM+5+mH…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDpEJ2QYqiXZ77w+PMUytf8mWnn7eJjDECW6tc5roua9/9pS1Ma6onQymKSoxilcLub1m/6R4EgLfJo8lqATE…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-12-19 to 2027-01-20

Expires in 246 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.oakworks.com/?AspxAutoDetectCookieSupport=1

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://oakworks.com"), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' www.oakworks.com https://q.clarity.ms/collect stage.oakworks.com *.smartystreets.com stats.g.doubleclick.net cdn.ywxi.net www.google-analytics.com google-analytics.com ajax.googleapis.com fonts.googleapis.com ; style-src data: 'unsafe-inline' www.oakworks.com stage.oakworks.com oakworks-cdn.sirv.com oakworks.sirv.com cdn.ywxi.net cdnjs.cloudflare.com www.google.com www.gstatic.com www.googletagmanager.com fonts.googleapis.com ssl.p.jwpcdn.com; img-src 'self' https://seal.godaddy.com https://www.googletagmanager.com https://oakworks.sirv.com data: www.oakworks.com stage.oakworks.com oakworks.sirv.com oakworks-cdn.sirv.com www.google-analytics.com stats.g.doubleclick.net google-analytics.com ajax.googleapis.com ssl.google-analytics.com web-assets-prod.s3.amazonaws.com www.paypal.com cdn.ywxi.net www.paypalobjects.com jwpltx.com; font-src 'self' data: www.oakworks.com stage.oakworks.com oakworks-cdn.sirv.com oakworks.sirv.com fonts.googleapis.com cdnjs.cloudflare.com
strict-transport-security: max-age=31536000;includeSubDomains; preload