indexo.dev

donaldson-group.co.uk

.uk crawl

First seen 2026-05-09 · Last seen 2026-05-09 · ok HTTP/1.1 200 2197 ms crawled 2026-05-15

GB · 34.142.38.194 · AS396982 Google LLC

Reputation 100/100

Classifying

HTML metadata

Title
Home - Donaldson Group
Description
We are a family of pioneering timber experts with a portfolio of diverse, exciting, specialist business in 44 sites right across the UK.
Language
en-GB
Generator
Powered by WPBakery Page Builder - drag and drop page builder for WordPress.
Canonical
https://donaldson-group.co.uk/
Feeds

Open Graph

url
https://donaldson-group.co.uk/
title
Home - Donaldson Group
locale
en_GB
site name
Donaldson Group
description
We are a family of pioneering timber experts with a portfolio of diverse, exciting, specialist business in 44 sites right across the UK.

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager

Third-party hosts loaded (5)

  • cdnjs.cloudflare.com×4
  • cookie-cdn.cookiepro.com×2
  • js-eu1.hs-scripts.com×2
  • github.com×1
  • www.googletagmanager.com×1

Social

DNS records live

NS
  • jeff.ns.cloudflare.com
  • mia.ns.cloudflare.com
MX
  • 10 mx0.123-reg.co.uk
  • 20 mx1.123-reg.co.uk

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:eu._netblocks.mimecast.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:42ddf9747252615@rep.dmarcanalyzer.com; ruf=mailto:42ddf9747252615@for.dmarcanalyzer.com; fo=1;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-04-23 to 2026-07-22
Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://donaldson-group.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak content type protection
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=(), fullscreen=(), payment=(), clipboard-read=(), clipboard-write=(), screen-wake-lock=(), accelerometer=(), camera=(), encrypted-media=(), display-capture=()
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self' https://*.vimeo.com https://*.doubleclick.net https://www.google.com https://youtube.com https://facebook.com https://fonts.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com/ https://use.typekit.net/ https://cdn-cookieyes.com/ https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://s.imgur.com https://imgur.com https://i.imgur.com https://500px.com https://drscdn.500px.org https://www.reddit.com https://www.flickr.com https://c1.staticflickr.com https://maxcdn.bootstrapcdn.com http://code.ionicframework.com https://cdn.fontawesome.com/ https://cdn-cookieyes.com https://www.googletagmanager.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.google.com/ https://*.googleapis.com/ https://*.cookiepro.com https://*.cloudflare.com https://github.com https://*.githubusercontent.com https://*.doubleclick.net https://*.hs-analytics.net https
strict-transport-security
max-age=31536000; includeSubdomains; preload

Links to (4)

Linked from (1)