bluecrestwellness.com — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Bluecrest Wellness - Your Healthier Tomorrow Starts Today
Description: Private health MOTs and in-depth assessment packages at centres across the UK. Affordable, local and convenient tests with 24/7 GP helpline access.
Language: en
Canonical: https://www.bluecrestwellness.com/

Open Graph

title: Bluecrest Wellness - Your Healthier Tomorrow Starts Today
description: Private health MOTs and in-depth assessment packages at centres across the UK. Affordable, local and convenient tests with 24/7 GP helpline access.

Technology

Server: nginx
CMS: Next.js
JS framework: Next.js

Analytics

Google Tag Manager

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (7)

dev.visualwebsiteoptimizer.com×1
fonts.googleapis.com×1
js.hsforms.net×1
maps.googleapis.com×1
widget.trustpilot.com×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

08006522183

Address

Ridgeworth House, 5/9 Liverpool Gardens, BN11 1RY, Worthing, GB

Registration

Registrar

IONOS SE

Created

2013-06-19

Expires

2027-06-19 381 days left

Updated

2025-10-08

Name servers

ns-1050.awsdns-03.org
ns-1667.awsdns-16.co.uk
ns-398.awsdns-49.com
ns-831.awsdns-39.net

DNS records live

NS

ns-1050.awsdns-03.org
ns-1667.awsdns-16.co.uk
ns-398.awsdns-49.com
ns-831.awsdns-39.net

MX

0 d241854.a.ess.uk.barracudanetworks.com
1 d241854.b.ess.uk.barracudanetworks.com

TXT

Show 4 TXT records

atlassian-sending-domain-verification=eef31335-7f51-41a7-b9d8-387ce9385502
ou7d3h3rqkobh6mohl9qo3rhm5
unbounce=464450
"-v=spf1 ip4:213.131.182.34 include:msgfocus.com include:spf.mandrillapp.com include:spf.protection.outlook.com include:6428625.spf10.hubspotemail.net include:_spf.google.com include:spf.ess.uk.barracudanetworks.com -all

Verified for

Anthropic
Atlassian
Google
Meta

Email authentication partial

SPF

v=spf1 ip4:213.131.182.34 include:msgfocus.com include:spf.mandrillapp.com include:spf.protection.outlook.com include:6428625.spf10.hubspotemail.net include:_spf.google.com include:spf.ess.uk.barracudanetworks.com -all

strict (-all)

DMARC

v=DMARC1; p=none; fo=1; rua=mailto:rua+bluecrestwellness.com@dmarc.barracudanetworks.com; ruf=mailto:ruf+bluecrestwellness.com@dmarc.barracudanetworks.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCc5zth1KND80NxSEAR9StcNFYtwm3NNtn1I4OMpc37gsQh8JMqtNVCfgWwIBxQ3ZD+iBrc4gEVd2an2ffN9r…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA542QLYmE9YXg6WQ//SOIGHx/8p80tty5Nrv8LihUCXWLyxCuzJI/gNpRgcf1tbE3r+TdFrB+g9cTHQ…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-04-05 to 2026-10-20

Expires in 139 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bluecrestwellness.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(self "https://js.stripe.com"), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' http: https: wss:; connect-src 'self' http: https: wss:; font-src 'self' http: https: data: fonts.gstatic.com; img-src 'self' http: https: data: https://bluecrest-strapi.s3.eu-west-1.amazonaws.com; media-src 'self' http: https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; style-src 'self' 'unsafe-inline' http: https: https://fonts.googleapis.com; worker-src 'self' blob:;
strict-transport-security: max-age=31536000; includeSubDomains; preload