ouh.nhs.uk

.uk crawl

First seen 2026-04-15 · Last seen 2026-05-15 · ok HTTP/1.1 200 5889 ms crawled 2026-05-10

US · 172.66.0.125 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Home - Oxford University Hospitals
Language: en-GB

Open Graph

url: https://www.ouh.nhs.uk/

Technology

CDN: Cloudflare
CMS: Drupal

Third-party hosts loaded (1)

www.cqc.org.uk×1

Social

DNS records live

NS

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

MX

0 ouh-nhs-uk.mail.protection.outlook.com

TXT

Show 4 TXT records

sophos-domain-verification=4398111efc2a1488b593819b99ac7b17738409f9528675b79151c0425358ef01
gh23q05gqd0pfdfytnjf92jvs22xc9f0
GOOGLE-SITE-VERIFICATION=MZVVQ12LPZVACVGDAA_QQSOFBP4I5LSQ5URMDDDHU-G
pOD9ThtNnbNItsuWkU/IQuhuBU8lcAYpZ+BFhNEV6EyfKesUvx2zGhAnmLNc0RC+CDxJlC0QQWWjIe/T4Ptbtw==

Email authentication strong

SPF

v=spf1 include:_spf.nhs.net include:spf.smtp2go.com include:spf_c.oraclecloud.com include:spf.ecase.co.uk include:spf.protection.outlook.com a:big5.netfm.org ip4:5.57.63.151 ip4:188.65.39.186 ip4:51.89.147.38 ip4:212.250.5.212 ip4:86.188.150.17 ip4:31.24.106.94 -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:dvajkpH5FP6@dmarc-rua.mailcheck.service.ncsc.gov.uk;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

default: v=DKIM1; h=sha256; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGMxFioZM4SsrX+ppBB4uYiNUX+5J10gV985NcCOCgsHc4j0gnPk+qLo4qMm/Gr…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVcnWngiQBwUWpvgP6TjI78wk8qOKGY3yTghFYg5RQrMSjKdSiuk4GzzHwq6DKCDboOvWffmi8Bf1V…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubzz4w9RSR9aCnX0Uzgx8BnUuqQ89hJ5+ekJsjYrZCtvzUm0y+mGgoCQ13xlhmVfX41k7t+e6t8e/Q…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WE1

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.ouh.nhs.uk/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy