indexo.dev

theoxfordcollection.co.uk

.uk crawl

First seen 2026-04-15 · Last seen 2026-05-14 · ok HTTP/1.1 200 5344 ms crawled 2026-05-10

US · 188.114.96.3 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
The Oxford Collection ® | City Centre Hotels & Restaurants
Description
Oxford based, independently owned, luxury five-star plus quality hotels and Oxford's largest and most successful restaurants and bars in the city centre.
Language
en-US
Canonical
https://www.theoxfordcollection.co.uk/
Feeds

Open Graph

url
https://www.theoxfordcollection.co.uk/
title
The Oxford Collection ® | City Centre Hotels & Restaurants
locale
en_US
site name
The Oxford Collection
description
Oxford based, independently owned, luxury five-star plus quality hotels and Oxford's largest and most successful restaurants and bars in the city centre.

Technology

CDN
Cloudflare
CMS
WordPress
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • fd.cleantalk.org×2
  • js-eu1.hs-scripts.com×2
  • fonts.googleapis.com×1

Social

Contact

Email
Phone

Registration

Registrar
OVH
Created
2020-02-06
Expires
2027-02-06 261 days left
Updated
2026-02-23
Name servers
  • ivy.ns.cloudflare.com.
  • woz.ns.cloudflare.com.

DNS records live

NS
  • ivy.ns.cloudflare.com
  • woz.ns.cloudflare.com
MX
  • 0 mx1-eu1.ppe-hosted.com
  • 10 mx2-eu1.ppe-hosted.com
  • 20 theoxfordcollection-co-uk.mail.protection.outlook.com
  • 32767 ms14009530.msv1.invalid
TXT
  • ppe-39d05c5b194743036d3a165aa13c47bd9772a6c1
Verified for
  • Google

Email authentication partial

SPF
v=spf1 +a +mx +include:dispatch-eu.ppe-hosted.com +include:spf.protection.outlook.com +include:spf-uk.emailsignatures365.com +include:143451699.spf08.hubspotemail.net +ip4:129.80.0.0/16 +ip4:129.151.48.0/20 +ip4:129.153.0.0/19 +ip4:129.153.32.0/20 +ip4:129.153.128.0/18 +ip4:129.153.224.0/20 +ip4:129.158.32.0/19 +ip4:129.158.192.0/18 +ip4:129.159.64.0/18 +ip4:129.159.160.0/19 +ip4:129.213.8.0/21 +ip4:129.213.16.0/20 +ip4:129.213.32.0/19 +ip4:129.213.64.0/18 +ip4:129.213.128.0/18 +ip4:129.213.192.0/20 +ip4:129.213.208.0/21 +ip4:132.145.128.0/18 +ip4:132.145.192.0/19 +ip4:132.226.32.0/19 +ip4:138.2.192.0/19 +ip4:141.148.0.0/18 +ip4:141.148.64.0/19 +ip4:143.47.96.0/19 +ip4:150.136.0.0/16 +ip4:150.230.160.0/19 +ip4:151.104.224.0/19 +ip4:152.70.32.0/22 +ip4:152.70.192.0/20 +ip4:158.101.96.0/19 +ip4:193.122.128.0/17 +ip4:193.123.128.0/19 +ip4:205.147.88.0/23 +ip4:207.135.4.0/22 +ip4:207.135.10.0/23 +ip4:207.135.12.0/22 +ip4:207.135.29.0/24 +ip4:129.213.0.128/25 +ip4:129.213.2.128/25 +ip4:129.213.4.128/25 +ip4:130.35.16.0/22 +ip4:130.35.96.0/21 +ip4:130.35.144.0/22 +ip4:130.35.200.0/22 +ip4:130.35.228.0/22 +ip4:134.70.24.0/21 +ip4:134.70.32.0/22 +ip4:138.1.48.0/21 +ip4:140.86.216.0/21 +ip4:140.91.10.0/23 +ip4:140.91.12.0/22 +ip4:147.154.0.0/19 +ip4:147.154.32.0/25 +ip4:147.154.36.0/22 +ip4:147.154.40.0/21 +ip4:147.154.48.0/21 +ip4:147.154.56.0/22 +ip4:3.82.81.201 +ip4:3.81.178.115 +ip4:149.72.136.158/32 +ip4:149.72.150.15/32 +ip4:168.245.107.83/32 ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:jonathan@iflookscouldkill.co.uk; ruf=mailto:jonathan@iflookscouldkill.co.uk; fo=1;
policy: none (monitoring only)
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i99zyRSCgGLC4029qyJd4wzFBcMVyLnIycGqMAZvNg47bK+kIlxiUdlTlsP8nHdtcT4d5X/xXunsc…
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJwOvLkLOHkiv4uF5Z/4lKWvfh5bSBoPYsoBxK9RloIhMl+rILykR3tQ/MVatkKPiLGobg4YxXmnL7…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyxWbXRDa4VJLAGGHVIQfrkB7q27obExXF9S8Qli7UDs9DP5lKOOe04cdpDJ5W9+W8W8IT6+2Uk+3D…
selectors probed

Certificate (current)

WE1
from 2026-05-06 to 2026-08-04
Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.theoxfordcollection.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
autoplay=(self), display-capture=(self), fullscreen=(self), geolocation=(self), picture-in-picture=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' https: data: blob:; connect-src 'self' https:; font-src 'self' https: data: blob:; media-src 'self' https: data: blob:; report-uri 'self' /wp-json/csp-report/v1/log; form-action 'self' https:; frame-ancestors 'self'; object-src 'self' https:; frame-src 'self' https: data: blob:; base-uri 'self'; upgrade-insecure-requests
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (13)

Linked from (6)