laingorourke.com

HTML metadata

Title: Laing O’Rourke
Description: Laing O'Rourke is an international engineering enterprise, founded on over a century and a half of experience.
Language: en
Canonical: https://www.laingorourke.com/

Open Graph

url: https://www.laingorourke.com/
title: Laing O’Rourke - Homepage
locale: en-GB
site name: Laing O’Rourke
description: Laing O'Rourke is an international engineering enterprise, founded on over a century and a half of experience.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.googletagmanager.com×3
maps.googleapis.com×1

Social

Contact

Phone

1322 296200

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2002-06-19

Expires

2026-06-19 31 days left

Updated

2025-06-15

Name servers

ns1.netnames.net
ns2.netnames.net
ns5.netnames.net
ns6.netnames.net

DNS records live

NS

ns1.netnames.net
ns2.netnames.net

MX

5 mxa-00583502.gslb.pphosted.com
5 mxb-00583502.gslb.pphosted.com

TXT

Show 15 TXT records

atlassian-domain-verification=OZV4Vfs7Zs3eldTenmA+ABrmFcbLc+WIfYs8QlB3wFz+ZjVlkSSYMZYtlyHjaWtQ
v=spf1 include:spf-00583502.pphosted.com include:spf.protection.outlook.com ip4:80.69.4.13 ip4:89.187.97.130 -all
MS=ms84035145
bGFpbmdvcm91cmtl
_3x5js6eoamjgjrqmy29w6c2he7vj18e
_b33gs4rs7oki5cq5ehxbjtkc3qwuq9e
apple-domain-verification=tNqnsJ1YwBOCS1VU
docusign=41c9d1b3-090c-4341-96c4-8dc4174cf97b
docusign=89916301-33fd-4aa5-b1a6-e2a5269117cf
safetime-sso=hjlqiKHP3AjNaS6t4nk3gayXTqyGps1n
onetrust-domain-verification=0014b51bdd894c3598d970808e940ecd
google-site-verification=YS_rfe6rZkiawkhwvHqY_VG7ic5w4GRLVY6_1B_vQFE
google-site-verification=lvKQm_xMGBNpz_YBWcFLmlu6HTMBCgOzPOMEZUPsiSQ
SMP84/iPwksQWHOHsT2L7S3rZmMQ7u2q+AoO/oclVKdaNMY8/ITjnMJX4Tz0M/pT8lFA07C1OAgOSJ6l+iwcjg==
atlassian-domain-verification=NqGhH4spden30daEjmhd8QiFnySNq5CrkAG/ANi/mBZwMrUI7AuMq2Yv2V2NZrJ6

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-02-03 to 2027-03-07

Expires in 292 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.laingorourke.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),geolocation=(self),gyroscope=(),layout-animations=(self),legacy-image-formats=(self),magnetometer=(),microphone=(),midi=(),navigation-override=(),oversized-images=(self),payment=(),publickey-credentials-get=(),speaker-selection=(),sync-xhr=(self),unoptimized-images=(self),unsized-media=(self),usb=(),screen-wake-lock=(),web-share=(),xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'self' 'nonce-pDVcAS65o7Awt4LiF92zqDZp59lsLxJLZdkswOq7ti0=' ajax.cloudflare.com cdnjs.cloudflare.com www.google.com www.gstatic.com secure.wufoo.com static.wufoo.com cc.cdn.civiccomputing.com maps.googleapis.com player.vimeo.com *.youtube.com *.googletagmanager.com googletagmanager.com www.google-analytics.com tools.eurolandir.com 3xscreen.videosync.fi s3.amazonaws.com laingorourke.us1.list-manage.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com;object-src 'none';connect-src 'self' maps.googleapis.com our.umbraco.com *.google-analytics.com google-analytics.com apikeys.civiccomputing.com clapi.civiccomputing.com stats.g.doubleclick.net analytics.google.com *.analytics.google.com region1.google-analytics.com region1.analytics.google.com printreleaf.com;font-src 'self' fonts.gstatic.com;frame-src 'self' *.wufoo.com www.google.com printreleaf.com marketplace.umbraco.com youtube.com www.youtube.com player.vimeo.com forms.zohopublic.eu tools.eurolandir.
strict-transport-security: max-age=2592000