benenden.co.uk

HTML metadata

Title: Affordable Private Healthcare Provider | Benenden Health
Description: Affordable private healthcare. GP helpline, diagnostics, approved surgical treatments and a much more. All for less than £16 per person, per month.
Language: en-GB
Canonical: https://www.benenden.co.uk

Technology

Analytics

Google Tag Manager
Hotjar

Ads

Google Ads
Meta Pixel
Xandr

Cookie consent

OneTrust

Third-party hosts loaded (15)

cdnjs.cloudflare.com×6
benenden-global-assets-cdn-bqb6geb7cuddbshb.a01.azurefd.net×4
cloud.typography.com×2
benenden.syn-finity.com×1
cdn.cookielaw.org×1
connect.facebook.net×1
dev.visualwebsiteoptimizer.com×1
hello.myfonts.net×1
script.hotjar.com×1
secure.adnxs.com×1
tracking.audio.thisisdax.com×1
vars.hotjar.com×1
widget.trustpilot.com×1
www.googleadservices.com×1
www.googletagmanager.com×1

Social

Contact

Phone

0800 414 8001

Address

Holgate Park Drive, YO26 4GG, York, North Yorkshire, UK

Registration

Registrar

British Telecommunications plc t/a BTNET

Created

1998-03-04

Expires

2028-03-04 654 days left

Updated

2026-02-25

Name servers

ns0.bt.net.
ns1.bt.net.
ns2.bt.net.

DNS records live

NS

ns0.bt.net
ns1.bt.net
ns2.bt.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 19 TXT records

Facebook-domain-verification=w4cgot7n4uy52g6nfual8gc9ztj8gb
MS=ms29594212
6pQTziVvH2h8ygmFZOV4DzSBCFtKb9nJvNAKeBENGvQ=
UAIH7yWxagVVJXRuIpaEXmE0i4+ByIM25koMCFeYZSs=
IRzULk6NZcoRoYkcM+5x4jTl2n5qD5hjcnC+gkZhzso=
amazonses:UzRkesfeLmEJ0SBITuH9ZobCAvpp9wydwb3BBBqJ49o=
8bHnZQTlKrEDGSLvlEzNpBHBLDCfME7IvwVhOWYJVk0=
mx0uOvpbNzcEL83J3tYB9BsAboJvyQUMtwxZQnBicLg=
1ubkyLrgjFty2TGjooWJcPLlUlFIxpfHXOQACjJ1kyd/nU4FjVf11YjrkVAao09klDM2Q7IVA+jMBasp3XHx8w==
fT4Bhb3u9EnMfpCYbu4F1mgw1obNmDQNIwXf6E/rQ+A=
t14jg7JMRv0O+e4gLlqqaDul0oKQyzgkR4AIBCapiwHGgaO11ygQpbVk/KF7Tv6W5MkNIAlD0/ZpntQe7NnHiw==
atlassian-domain-verification=3Oix9jQ5q7DlXQHcRdiG2a4UdrKYJ5pg/vsZmhNc4tw5ohDSe94zQ9Lm4sDhK0Zw
pardot926162=ee377ca6715f74144cadcdcc565f769c4b1278ec52d1438064368f54f9300375
google-site-verification=mF-GEfDp8y0IADk3BjswyMawIeNhODAmxnRzrX-z3mQ
miro-verification=1b009598688c6a5c3ba58440089475996eb71bea
0ed1fe018accda5f42d1234436b3828f06d2ee6bda
access-domain-verification=11e957b07aa4c9af79b50ee87b5f75bbf634cc193abc846f978afcfb18db3df9
facebook-domain-verification=w4cgot7n4uy52g6nfual8gc9ztj8gb
apple-domain-verification=TIJs7sbuppnjQDRZ

Email authentication strong

SPF

v=spf1 include:spf1.benenden.co.uk include:spf2.benenden.co.uk -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:4affd9089a68735@rep.dmarcanalyzer.com; ruf=mailto:4affd9089a68735@for.dmarcanalyzer.com; fo=1;

policy: reject (enforced)

DKIM

Show 6 DKIM selectors

selector1: v=DKIM1; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKXhn2ugDP7+ZTB19VwJUiqkueQ11f9bYIAqtyPqC0VKFUZYglqgjlOESivFy9enP6LEEMJck…
selector2: v=DKIM1; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNA7r2Q8hjuSS6vd4iQAEc/Ods/lgGA1SnC83DIsAg2wCK4mOhj6w6s+6RZgJI8MYKcSyGqV…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
dkim: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5XOX8SanKHtmpPdNl5vyYAjuDd8KhLxrwrHCVMB+b0UPJy58/Uk7n0SdGc6rGBDmEBgOZ1/5Gcokq9b…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xK4MmPkRJ3kHZR3SF5QITyCDemi3Gljx63F9DKnEZQJttHgQCj/EJzBMmSTsnwuABhRtwXoYhstm2Ldzu…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDvV+xLs3Vx+dEpZebeXJTOUOttJm/4UO23iZ3hL5XXXeyArM+jeUkccnyRmWuYtRSYPUrhQDAGL69jYyk8Hgq8Td…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-10-24 to 2026-11-25

Expires in 190 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.benenden.co.uk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: NOSNIFF
content-security-policy: default-src 'self' *.doubleclick.net *.synthetix.com https://stats.g.doubleclick.net *.responsetap.com blob:; media-src 'self' *.synthetix.com; frame-ancestors 'self' *.doubleclick.net *.hotjar.com *.youtube.com *.holgate-code.ninja *.benenden.co.uk https://widget.trustpilot.com https://www.google.com https://www.facebook.com; frame-src 'self' *.doubleclick.net *.hotjar.com *.youtube.com *.pardot.com https://apps.euw2.pure.cloud https://widget.trustpilot.com https://www.google.com https://www.facebook.com https://www.opinionstage.com https://www.googletagmanager.com https://connect.facebook.net https://embed.ex.co https://cdnjs.cloudflare.com https://optimize.google.com https://recaptcha.google.com https://forbusiness.benenden.co.uk app.vwo.com *.visualwebsiteoptimizer.com https://mybenendenhealthrewards.co.uk; font-src 'self' *.synthetix.com *.gstatic.com https://cloud.typography.com https://hello.myfonts.net https://benendenglobalassets.blob.core.windows.net https://benenden-global-a
strict-transport-security: max-age=31536000

Links to (6)

Linked from (2)

yorkpride.org.uk×2
financialmutuals.org×1