randoxhealth.com

HTML metadata

Title

Randox Health | Private Blood Tests & Health Checks That Put You In Control

Description

Health checks that put you in control. From comprehensive full body health checks, private blood tests and a convenient range of home blood test kits we've got you covered.

Language

en-GB

Canonical

https://randoxhealth.com/en-GB/

Translations

en ×2

Technology

CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (12)

rdxhealthfrontdoor-hncxg6h5atakbrfz.a03.azurefd.net×8
stesrhplatforma071.blob.core.windows.net×7
cdn.bc0a.com×1
cdnjs.cloudflare.com×1
fonts.googleapis.com×1
health-front-door-hufqdfdubmavewgw.a02.azurefd.net×1
js.afterpay.com×1
s3.amazonaws.com×1
use.typekit.net×1
web-components.splitit.com×1
www.dwin1.com×1
www.googletagmanager.com×1

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2012-10-10

Expires

2026-10-10 142 days left

Updated

2025-10-06

Name servers

ns1.netnames.net
ns2.netnames.net
ns5.netnames.net
ns6.netnames.net

DNS records live

NS

ns1.netnames.net
ns2.netnames.net
ns5.netnames.net
ns6.netnames.net

MX

10 cust81562-1.in.mailcontrol.com
10 cust81562-2.in.mailcontrol.com

TXT

Show 4 TXT records

ddosx-site-verification=a49373353abefd22ecef6c279df7e3fa94b7730704a11986659cab14069c8260
rAhK9RNlUfUmiE53HnawLbEUbuTiOx9/UHvgwiYaBH9xPesP53m7YVA39pfCz//HceenE85mrB4lqaEH1K5PsA==
21bvpbjrenccrfvsb0nsfks8tv
20171129130936nfrwi07fufaumigfbaj6xqi0aaskes1te8rhtzlv06y0r3jmz4

Verified for

Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 mx a ip4:86.188.201.211 ip4:86.188.201.215 +ip4:78.137.121.178 ip4:194.72.147.250 include:Spf.protection.outlook.com include:sendgrid.net include:mailcontrol.com include:one.zoho.eu ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:infosec@randox.com; ruf=mailto:infosec@randox.com; pct=50; fo=1;

policy: quarantine · pct=50

DKIM

Show 4 DKIM selectors

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zWZuvWhULmz+73JsfxJlg8emnEFYgEKX2+2RteVS7i9o+ZjeYWFrzWFaYQFPPdzWXyol0jKpjdh3F…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Jx93mTCVOiRE/V1jFxhHta+AsD0rDpJvRaHNwEE5oWf3HerhPzzeH0JbDAWLI6swtAbqm43pa4F+ftrr…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwFJsUs5mzGRXXjESOs79Wq/Cb20dM9lu+B7KN1UbWsHwGKWevYT1DjbWRWxdDnh+RWfAPRwPSpVzp8s4M84L51l…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-14 to 2026-08-15

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://randoxhealth.com/en-GB/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' https://e.clarity.ms https://analytics.tiktok.com https://bat.bing.net https://bat.bing.com https://cdn.bc0a.com https://ixfd2-api.bc0a.com https://www.wepowerconnections.com https://cdn77.api.userway.org https://api.postcodes.io/postcodes/ https://cdnjs.cloudflare.com https://healthchecks.randoxhealth.com wss://vts.zohopublic.eu https://vts.zohopublic.eu https://stats.g.doubleclick.net https://region1.analytics.google.com https://www.google.com https://js.zohocdn.com https://salesiq.zohopublic.eu https://salesiq.zoho.eu https://px.ads.linkedin.com https://pagead2.googlesyndication.com https://consentcdn.cookiebot.com https://region1.google-analytics.com https://www.googletagmanager.com https://cdn.userway.org https://api.userway.org https://www.youtube.com https://documents.sandbox.splitit.com https://static.afterpay.com https://widget.trustpilot.com https://web-components.sandbox.splitit.com; script-src 'self' 'unsafe-inline' https://e.clarity.ms h
strict-transport-security: max-age=63072000; includeSubDomains; preload