indexo.dev

hillier.co.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 5797 ms crawled 2026-05-19

US · 99.83.167.16 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Hillier Nurseries and Garden Centres | Hillier
Description
Hillier Nurseries and Garden Centres. 22 Garden Centres across South of England. Wholesale nurseries, trees and Cash & Carry for trade.
Language
en-GB
Generator
WordPress 6.9.4
Canonical
https://www.hillier.co.uk/
Feeds

Open Graph

url
https://www.hillier.co.uk/
title
Hillier Nurseries and Garden Centres | Hillier
locale
en_GB
site name
Hillier
description
Hillier Nurseries and Garden Centres. 22 Garden Centres across South of England. Wholesale nurseries, trees and Cash & Carry for trade.

Technology

Server
nginx
CMS
WordPress
Fonts
  • Font Awesome
Third-party hosts loaded (9)
  • maps.googleapis.com×3
  • static.klaviyo.com×2
  • api.feefo.com×1
  • audioxi-18-adswizz.attribution.adswizz.com×1
  • cdn-4.convertexperiments.com×1
  • gmpg.org×1
  • octave-1374-adswizz.attribution.adswizz.com×1
  • unpkg.com×1
  • use.fontawesome.com×1

Social

Contact

Address
Ampfield House, Ampfield, SO51 9PA, Romsey, Hampshire, United Kingdom

Registration

Registrar
Ionos SE
Created
1997-07-25
Expires
2026-07-25 66 days left
Updated
2025-07-24
Name servers
  • ns1.digitalocean.com.
  • ns2.digitalocean.com.
  • ns3.digitalocean.com.

DNS records live

NS
  • ns1.digitalocean.com
  • ns2.digitalocean.com
  • ns3.digitalocean.com
MX
  • 10 mx01.hornetsecurity.com
  • 20 mx02.hornetsecurity.com
  • 30 mx03.hornetsecurity.com
  • 40 mx04.hornetsecurity.com
TXT
Show 8 TXT records
  • _globalsign-domain-verification=zgJ78DliKFHDzdyutaMJxnqj0xPg1cfZ35m5my-vmi
  • airtable-verification=8245f713752f76b1164faef60b895e91
  • klaviyo-site-verification=VDmrXy
  • google-site-verification=DaEoJ51UCE3NHYPNfAzj-R9kuCt7T9ArOJT2P4H_amQ
  • google-gws-recovery-domain-verification=45223672
  • MS=ms70635850
  • apple-domain-verification=lQXX3fQLM701TDzk
  • google-site-verification=NW2NogU0fVS20IcEpo_nXjWTpcgT6CbnGogOCuriuSw

Email authentication strong

SPF
v=spf1 redirect=hillier.co.uk.spf.hornetdmarc.com
no all qualifier
DMARC
v=DMARC1; p=quarantine; pct=100; fo=1:d:s; rua=mailto:a.e0kyl5s1@reports.hornetdmarc.com; ruf=mailto:f.e0kyl5s1@reports.hornetdmarc.com
policy: quarantine
DKIM
  • default: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfwpYxAJh/Q7rNMoaKfGsB362g4/2FCicU7HKLTp3ZYKQbdc8wAjMAchIxsR7nvEDznJ…
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025
from 2026-03-08 to 2027-04-09
Expires in 325 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hillier.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options
nosniff
content-security-policy
frame-src 'self' cdn.hillier.co.uk *.googletagmanager.com *.google.com *.youtube.com data: *.facebook.com *.sagepay.com *.elavon.com *.woobox.com woobox.com; connect-src 'self' cdn.hillier.co.uk *.googlesyndication.com *.linked.com *.google.com *.convertexperiments.com cdn.cookielaw.org *.google-analytics.com *.analytics.google.com *.feefo.com *.nr-data.net *.doubleclick.net *.clarity.ms *.googleapis.com tagmanager.google.com *.facebook.com *.sagepay.com *.elavon.com *.onetrust.com *.klaviyo.com *.veritonicmetrics.com; font-src 'self' data: cdn.hillier.co.uk *.fontawesome.com *.typekit.net *.gstatic.com *.feefo.com *.klaviyo.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: cdn.hillier.co.uk woobox.com *.licdn.com *.woobox.com *.feefo.com *.convertexperiments.com *.analytics.google.com *.nr-data.net cdn.cookie *.googleoptimize.com law.org *.newrelic.com *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com polyfill.io unpkg.com api.w3-edge.c
strict-transport-security
max-age=31536000

Links to (6)

Linked from (2)