nutricia.co.uk

HTML metadata

Title: Nutricia UK | Homepage for Patients & Carers
Description: Discover Nutricia for Patients and Carers including information about our products, support services, recipe ideas and more.
Language: en-GB
Canonical: https://www.nutricia.co.uk/patients-carers.html

Open Graph

url: https://www.nutricia.co.uk/patients-carers.html
title: Nutricia UK | Homepage for Patients & Carers
site name: Nutricia UK
description: Discover Nutricia for Patients and Carers including information about our products, support services, recipe ideas and more.

Technology

Cookie consent

OneTrust

Third-party hosts loaded (6)

smartmedia.digital4danone.com×13
static-p72053-e643882.adobeaemcloud.com×2
cdn-ukwest.onetrust.com×1
cdn.channelsight.com×1
cdn.uk-medical-prd-danone.danone-dtc.net×1
px.ads.linkedin.com×1

Contact

Phone

03457%20623653

Registration

Registrar

CSC Corporate Domains, Inc

Created

1997-02-10

Expires

2027-02-10 265 days left

Updated

2026-02-06

Name servers

ns-1006.awsdns-61.net.
ns-1069.awsdns-05.org.
ns-2019.awsdns-60.co.uk.
ns-497.awsdns-62.com.

DNS records live

NS

ns-1006.awsdns-61.net
ns-1069.awsdns-05.org
ns-2019.awsdns-60.co.uk
ns-497.awsdns-62.com

MX

10 mxa-000f8e02.gslb.pphosted.com
20 mxb-000f8e02.gslb.pphosted.com

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: quarantine

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-05-04 to 2026-11-19

Expires in 182 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.nutricia.co.uk/patients-carers.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(self "https://staging.danoneskyr.co.uk" "https://promo.danoneskyr.co.uk")
x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' *.bazaarvoice.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.salesforce-scrt.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.google.co.in/ *.danoneskyr.co.uk/ *.google.mk/ *.googletagmanager.com/ *.paypalobjects.com/ *.paypal.com/ *.adsrvr.org/ *.applicationinsights.io/ *.adyen.com/ *.teads.tv/ *.hotjar.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.adobeaemcloud.com/ *.hotjar.io/ *.visualstudio.com/ *.bootstrapcdn.com/ *.briteverify.com/ *.channelsight.com/ *.chargebee.com/ https://app.retention.chargebee.com/ *.commander1.com/ *.force.com/ *.google.com/ *.googleapis.com/ *.gstatic.com/ *.live2support.com/ *.lpsnmedia.net/ *.mopinion.com/ *.myfonts.net/ *.onetrust.com/ *.pinterest.com/ *.salesforce-sites.com/ *.scene7.com/ *.sharethis.com/ *.tagcommander.com/ *.teads.tv/ *.visualstudio.com/ *.youtub
strict-transport-security: max-age=63072000; includeSubDomains; preload