ramsayhealth.co.uk

HTML metadata

Title: Private hospitals | Ramsay Health Care UK
Description: Ramsay Health Care UK offers weight loss surgery, hip & knee replacements, cosmetic surgery & other treatments through a network of private hospitals.
Language: en
Canonical: https://www.ramsayhealth.co.uk

Open Graph

url: https://www.ramsayhealth.co.uk/
title: Private hospitals | Ramsay Health Care UK
locale: en_GB
description: Ramsay Health Care UK offers weight loss surgery, hip & knee replacements, cosmetic surgery & other treatments through a network of private hospitals.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (6)

customer.cludo.com×3
cdn.optimizely.com×1
cdnjs.cloudflare.com×1
use.typekit.net×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

Address

Level 18, Tower 42, 25 Old Broad Street, EC2N 1HQ, London, ENG, GB

Registration

Registrar

Cloudflare, Inc.

Created

2007-07-25

Expires

2026-07-25 65 days left

Updated

2025-06-25

Name servers

merlin.ns.cloudflare.com.
reza.ns.cloudflare.com.

DNS records live

NS

merlin.ns.cloudflare.com
reza.ns.cloudflare.com

MX

10 ramsayhealth-co-uk.mail.protection.outlook.com

TXT

Show 14 TXT records

ov0s48gi2q4egbrnbepa1tr9ui
pe4bbfpbinh9ei1bdrjl846d35
redr94hnkij2n76vb128m7c5kq
u3ehvke2or46s85l4t99kiq400
vb3a764hkpm13ce1sdu3o3e1nq
z16yj28snh9x7mdz9sh53jy59qf0h66k
3jftgagibl53067954das4grdr
47ma5o38olitgkch4dgfopluof
4cf86me8gjgap38mgq4sg0uiv8
8eg565k17dig710efhfvid4jv9
IMUv+VCyKgLYslNYQh18nA0LpRAOXMeTScvqhlEPwmett1HAFiXBIqWGwl/43gIOEFRaxvcjZWhgAkP1hiGf5Q==
dr7y2r8qyp68d3n3qk4n86yk7f5d8z1q
have-i-been-pwned-verification=c1ba46a4f494821829eb13f91933744e
igtqfimu65p71hkl4is5eebt7d

Verified for

Google
Microsoft 365
Miro

Email authentication strong

SPF

v=spf1 mx ip4:146.101.67.17 ip4:146.101.67.16 ip4:146.101.67.13 ip4:146.101.67.4 a:mail2.ramsayhealth.co.uk include:eu.transmail.net include:spf.protection.outlook.com include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:xoc2g3hl@ag.eu.dmarcian.com; ruf=mailto:xoc2g3hl@fr.eu.dmarcian.com; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC92TyWpms0eF8wc4+uP/12dHP1q7PfJefKbvL0ADSiwCuFr/VHwHzxEcSP/m2fXzC/cE9nAAIbL2UnMW1kvc…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCiNlu+vPQTJT5kPS+UPlhPYhFpV1haCPdPH7qezlDdwdCnc79DlBj6j6WJhZMFb9hP7Nw3LxtqTCiUrylxWL…

selectors probed

Certificate (current)

WE1

from 2026-03-28 to 2026-06-26

Expires in 37 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.ramsayhealth.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' google.com googleapis.com maps.googleapis.com www.google.com bootstrap.com fontawesome.com fonts.googleapis.com fonts.gstatic.com www.gstatic.com www.googletagmanager.com script.infinity-tracking.com cdn-ukwest.onetrust.com www.google-analytics.com www.doctify.com www.cqc.org.uk code.jquery.com extsub.cmadvantage.co.uk customer.cludo.com js.monitor.azure.com googleadservices.com www.youtube.com edge.fullstory.com googleads.g.doubleclick.net connect.facebook.net bat.bing.com www.googleadservices.com static.hotjar.com bid.g.doubleclick.net script.hotjar.com cdn.optimizely.com cdn-ukwest.onetrust.com ict.infinity-tracking.net *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com adswizz.com octave-7535-adswizz.attribution.adswizz.com click.appcast.io niceincontact.com *.niceincontact.com *.s3.eu-west-2.amazonaws.com assets.zuko.io cdn.veritonic.com;
strict-transport-security: max-age=63072000; includeSubDomains