woodgraindistribution.com

.com crawl

First seen 2026-04-16 · Last seen 2026-05-17 · ok HTTP/1.1 200 4142 ms crawled 2026-05-11

US · 12.9.110.215 · AS7018 AT&T Enterprises, LLC

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Woodgrain - Wholesale Specialty Distributor
Language: en

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×3
maxcdn.bootstrapcdn.com×2
www.google.com×2
www.googletagmanager.com×1

Social

Contact

Phone

470-552-8446

Address

1301 Progress Center AveLawrenceville, GA 30043Hours: 8:00am – 5:00pm|470-552-8446

Registration

Registrar

Network Solutions, LLC

Created

2004-07-02

Expires

2028-07-02 774 days left

Updated

2023-05-03

Name servers

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

DNS records live

NS

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

MX

10 mxa-007e8101.gslb.pphosted.com
10 mxb-007e8101.gslb.pphosted.com

Verified for

Microsoft 365

Email authentication strong

SPF: v=spf1 mx include:spf-007e8101.pphosted.com include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:dnsreports@woodgraindistribution.com; ruf=mailto:dnsreports@woodgraindistribution.com; fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Network Solutions RSA OV SSL CA 3

from 2025-12-15 to 2027-01-16

Expires in 241 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://woodgraindistribution.com/

present

content-security-policy-report-only
x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google.com www.gstatic.com ssl.google-analytics.com script.crazyegg.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com; img-src 'self' ssl.google-analytics.com; font-src fonts.gstatic.com maxcdn.bootstrapcdn.com www.huttig.com; connect-src 'self' script.crazyegg.com www.google-analytics.com; media-src 'self'; object-src; prefetch-src 'self'; child-src; frame-src 'self' www.google.com; worker-src; frame-ancestors 'self'; form-action 'self'; block-all-mixed-content; base-uri 'self'; manifest-src 'self'; report-uri /csp_report;