unilabs.co.uk

.uk crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 3923 ms crawled 2026-05-20

US · 104.18.25.101 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Home | Unilabs

Language

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://unilabs.co.uk/

Translations

en ×3
es ×2
fr ×2
da
de
fi
it
nb
sv

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (14)

unilabs.ch×3
unilabs.com×2
cdn.cookielaw.org×1
fonts.googleapis.com×1
static.addtoany.com×1
unilabs.ae×1
unilabs.dk×1
unilabs.fi×1
unilabs.fr×1
unilabs.no×1
unilabs.pe×1
unilabs.se×1
www.googletagmanager.com×1
www.unilabs.es×1

DNS records live

NS

aurora.ns.cloudflare.com
damian.ns.cloudflare.com

MX

0 unilabs-co-uk.mail.protection.outlook.com
10 plomx1.advance.se
20 plomx2.advance.se

TXT

_vj8x91fg1m64ixp3ctadi6qlpepdc75
+ClDdBQSDHztXrhr6nspBy3P2GTWAzWJecgF0yN43mhi5lKDT2+0/sm3bM8EIkJfxDPIsk8L9ziAone5wcKFdw==
_msm9ewmylew28nmbn30fhmkxj2wnlv5

Verified for

GlobalSign
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:raul.rodero.castro@unilabs.com,mailto:joao.pereira@unilabs.com; ruf=mailto:raul.rodero.castro@unilabs.com,mailto:joao.pereira@unilabs.com; aspf=s; adkim=s; fo=1;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yirqkmgcqDGpEiFnMWrZ19gKXAJmHerZVGYYD5IpB4gyQ7XQqXYNyNjWsYlNbMqSy2puxq8M+IXZY…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh82PNKukfFQxoeg0FwBr8qSA+hdupbqnkbjzJgrq++1vSislLmO/RUt9Na1Ik2PCWjW4gIiapT0U+…

selectors probed

Certificate (current)

from 2026-05-18 to 2026-08-16

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://unilabs.co.uk/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: autoplay=(), geolocation=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' 'unsafe-inline' data: gap: https://ssl.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem * https://fonts.googleapis.com httpfs://static.addtoany.com/https://cdn.cookielaw.org https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net 'unsafe-inline'; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://widget.moin.ai https://css.zohocdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://jquery.app https://www.jqueryscript.net https://stackpath.bootstrapcdn.com; img-src * 'self' 'unsafe-inline' data:; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://widget.moin.ai https://se-content-b.psplugin.com https://content.psplugin.com htt