indexo.dev

westminsteracademy.org.uk

.uk crawl

First seen 2026-05-21 · Last seen 2026-06-04 · ok HTTP/1.1 200 2867 ms crawled 2026-05-28

IE · 34.249.130.126 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Welcome to Westminster Academy
Description
Sponsored by the Dangoor family, Westminster Academy is a non-selective, 11-18 academy and non fee-paying IB World School situated in central London.
Language
en

Technology

Server
nginx
jQuery
2.1.3 known XSS (<3.5)
Stack
PHP

Third-party hosts loaded (6)

  • 4905753ff3cea231a868-376d75cd2890937de6f542499f88a819.ssl.cf3.rackcdn.com×7
  • ajax.googleapis.com×1
  • fonts.cleverbox.co.uk×1
  • maps.google.com×1
  • maxcdn.bootstrapcdn.com×1
  • translate.google.com×1

Social

Contact

Email
Phone
Address
The Westminster Academy (Westbourne Green) single-academy trust,Sir Naim Dangoor Centre, 255 Harrow Road, London W2 5EZ

DNS records live

NS
  • ns01.one.com
  • ns02.one.com
MX
  • 1 aspmx.l.google.com
  • 10 aspmx2.googlemail.com
  • 10 aspmx3.googlemail.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
  • MS=89164F6F162B224CEDC1ABFACF3E4A9EB9785579
Verified for
  • Adobe

Email authentication partial

SPF
v=spf1 include:_spf.google.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:helpdesk@westminsteracademy.org.uk
policy: none (monitoring only)
DKIM
  • google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumEru3J2JmjdpobIuPpG37Pt7pz46cZ0gOg8a9ZZ5k5DNsHbUMvQvQa7mm4OJ0P2rRNmek895GnRzh…
selectors probed

Certificate (current)

R13
from 2026-04-09 to 2026-07-08
Expires in 27 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://westminsteracademy.org.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
strict-transport-security
max-age=63072000; includeSubDomains; preload

Links to (18)

Linked from (1)

Use this data via API

Everything on this page for westminsteracademy.org.uk is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/westminsteracademy.org.uk" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →