unilabs.fi

.fi crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 333 ms crawled 2026-05-20

US · 104.18.17.59 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title

Koti | Unilabs

Language

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://unilabs.fi/

Translations

en ×3
es ×2
fr ×2
da
de
fi
it
nb
sv

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (13)

unilabs.ch×3
unilabs.com×2
cdn.cookielaw.org×1
fonts.googleapis.com×1
unilabs.ae×1
unilabs.co.uk×1
unilabs.dk×1
unilabs.fr×1
unilabs.no×1
unilabs.pe×1
unilabs.se×1
www.googletagmanager.com×1
www.unilabs.es×1

Contact

Phone

06 824 1650

Registration

Created

2008-06-10

Name servers

phoenix.ns.cloudflare.com [technical check not done]
dean.ns.cloudflare.com [technical check not done]

DNS records live

NS

dean.ns.cloudflare.com
phoenix.ns.cloudflare.com

MX

10 mail1.webadmin1.net

TXT

_xscr7jyv8f6d770hztux5pzekjadjr6.dcv.digicert.com

Email authentication strong

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1; p=reject; aspf=s; adkim=s;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-17 to 2026-08-15

Expires in 86 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://unilabs.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: autoplay=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' gap: https://ssl.gstatic.com; script-src-elem self 'unsafe-inline' https://www.recaptcha.net/ https://www.gstatic.com *.unilabs.fi unilabs.fi *.unilabs.com unilabs.com https://www.clarity.ms https://www.google.com https://connect.facebook.net https://fonts.googleapis.com https://static.addtoany.com/ https://*.cookielaw.org https://cdn.cookielaw.org https://www.google-analytics.com/ https://www.googletagmanager.com https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.googletagmanager.com https://www.googletagmanager.com/; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://widget.moin.ai https://css.zohocdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com http://fonts.googleapis.com http://fonts.googleapis.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://jquery.app https:/
strict-transport-security: max-age=31536000; includeSubDomains