unilabs.ch

.ch crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 1585 ms crawled 2026-05-20

US · 104.18.12.96 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Home - FR | Unilabs

Language

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://unilabs.ch/fr

Translations

en ×3
fr ×3
de ×2
es ×2
it ×2
da
fi
nb
sv

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (15)

unilabs.com×2
cdn.cookielaw.org×1
fonts.googleapis.com×1
static.addtoany.com×1
unilabs.ae×1
unilabs.co.uk×1
unilabs.dk×1
unilabs.fi×1
unilabs.fr×1
unilabs.no×1
unilabs.pe×1
unilabs.se×1
widget.moin.ai×1
www.googletagmanager.com×1
www.unilabs.es×1

Social

DNS records live

NS

dean.ns.cloudflare.com
phoenix.ns.cloudflare.com

MX

10 gw5244.fortimail.com

TXT

Show 4 TXT records

y2S+jbTYMkidBRrcfnTMealOLp/6aHuPw6JQjeUzxTOx0gqEZR3UqHgKPuOK191+f6VW0AtPuMC9Oo4007Sp3w==
963z1gkh602bhb7v2p4f4scvnjhkgfgp
_imffr0bxbwonkjjs3x0qpfeaaecjlou
_iwic9lqi3iw90pbse7ztpfjp8u36fk1

Verified for

Brevo
Google

Email authentication weak

SPF: v=spf1 mx:unilabs.ch ip4:173.243.135.244/32 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-18 to 2026-08-17

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://unilabs.ch/fr

present

content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
missing Content Security Policy
weak frame protection
weak content type protection

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: autoplay=(), geolocation=()
x-content-type-options: nosniff, nosniff
content-security-policy-report-only: default-src 'self' 'unsafe-inline' data: gap: https://ssl.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.dvinci-easy.com; script-src-elem * https://fonts.googleapis.com httpfs://static.addtoany.com/ https://cdn.cookielaw.org https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net 'unsafe-inline' https://static.dvinci-easy.com; style-src 'self' 'unsafe-inline' https://sibforms.com http://fonts.googleapis.com https://widget.moin.ai https://css.zohocdn.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://jquery.app https://www.jqueryscript.net https://stackpath.bootstrapcdn.com https://static.dvinci-easy.com; img-src * 'self' 'unsafe-inline' data:; font-src 'self' 'unsafe-inline' https://assets.brevo.com https://fonts.gstatic.com https://wid