The mcdonald.org.uk domain is secured with DNSSEC.
Since you are not using a DNSSEC aware DNS resolver your system is open to accepting spoofed DNS responses. A DNS resolver which supported DNSSEC would authenticate DNS responses to prevent such attacks.
Congratulations! Since you are using a DNSSEC aware DNS resolver you are protected against spoofed DNS responses. Your system authenticates DNS data to protect you from such attacks.
See DNSSEC.net for more information.
Andrew McDonald <andrew{at}mcdonald.org.uk>.