indexo.dev

oxsci.org

.org crawl

First seen 2026-04-20 · Last seen 2026-05-11 · ok HTTP/1.1 200 1105 ms crawled 2026-05-14

US · 172.67.133.171 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
The Oxford Scientist - The University of Oxford's independent science magazine
Description
The University of Oxford's independent science magazine
Language
en-GB
Generator
Site Kit by Google 1.176.0
Canonical
https://oxsci.org/
Feeds

Open Graph

url
https://oxsci.org/
title
The Oxford Scientist
locale
en_GB
site name
The Oxford Scientist
description
The University of Oxford's independent science magazine

Technology

CDN
Cloudflare
CMS
WordPress
Analytics
  • Cloudflare Insights
  • Google Tag Manager
Ads
  • Google AdSense
Fonts
  • Google Fonts
Third-party hosts loaded (9)
  • i0.wp.com×40
  • pagead2.googlesyndication.com×3
  • www.googletagmanager.com×2
  • fonts.googleapis.com×1
  • fonts.gstatic.com×1
  • gmpg.org×1
  • pixel.quantserve.com×1
  • static.cloudflareinsights.com×1
  • stats.wp.com×1

Social

Contact

Address
rd Student Publications Limited - 2025

Registration

Registrar
Tucows Domains Inc.
Created
2017-12-12
Expires
2026-12-12 206 days left
Updated
2025-12-03
Name servers
  • cody.ns.cloudflare.com
  • lily.ns.cloudflare.com

DNS records live

NS
  • cody.ns.cloudflare.com
  • lily.ns.cloudflare.com
MX
  • 10 mx1.mythic-beasts.com
  • 10 mx2.mythic-beasts.com

Email authentication strong

SPF
v=spf1 include:_spf.mythic-beasts.com -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; pct=100; rua=mailto:b10ba71fadc040ae8b47e4e2f6f7fe4e@dmarc-reports.cloudflare.net,mailto:tech@ospl.org; ruf=mailto:tech@ospl.org
policy: quarantine
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-25 to 2026-07-24
Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://oxsci.org/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (7)

Linked from (1)