unilabs.fr

HTML metadata

Title

Accueil Unilabs

Description

Présentation de nos services aux particuliers et aux professionnels de santé. Nos services de diagnostic sont au cœur et à l'origine des choix thérapeutiques. Proposés sur nos 159 sites en France métropolitaine, ils bénéficient à nos 7 millions de patients chaque année.

Language

en

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://unilabs.fr/

Translations

en ×3
es ×2
fr ×2
da
de
fi
it
nb
sv

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (14)

unilabs.ch×3
cdn.cookielaw.org×2
unilabs.com×2
fonts.googleapis.com×1
static.addtoany.com×1
unilabs.ae×1
unilabs.co.uk×1
unilabs.dk×1
unilabs.fi×1
unilabs.no×1
unilabs.pe×1
unilabs.se×1
www.googletagmanager.com×1
www.unilabs.es×1

Registration

Registrar

Abion AB

Created

2002-12-09

Expires

2026-07-22 62 days left

Updated

2026-01-20

Name servers

dean.ns.cloudflare.com
phoenix.ns.cloudflare.com

DNS records live

NS

dean.ns.cloudflare.com
phoenix.ns.cloudflare.com

MX

5 unilabs-fr.mail.protection.outlook.com

TXT

Show 5 TXT records

_ue090wvlx7hpxdffvoat62i0v8d35ux
_vhm7d91xmu19e1hch5ed3pihlct3qvy
bzgdxf2r1k8q01ldw2gvyfb14smk5hnc
fwc4bw9f915kp7gx7d8jwp1c05zxp6nf
knowbe4-site-verification=c9db3a61df528371e09d90a9ced84f0c

Verified for

Brevo
Google
Microsoft 365

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:amazonses.com include:_spf.cegedim-hds.fr ~all

softfail (~all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdFp2eFZr0N5UPKMc+f6vjH7uTBlrYZsIXe3NF+0GXfErRI2KEv11gH3Aa6HwuugMPqqZrpewJkhTd…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/8LxStIl35RWCCt017dWMKUZv1IAiMMjWiIlDdTQixqYErp0imhmnonN7gPAOAorkuy2zkPYfxfY+…

selectors probed

Certificate (current)

WE1

from 2026-05-18 to 2026-08-16

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://unilabs.fr/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy
weak frame protection
weak content type protection

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: autoplay=(), geolocation=()
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self' data: gap: https://ssl.gstatic.com ; script-src 'self' blob:; script-src-elem * https://fonts.googleapis.com https://static.addtoany.com/ https://cdn.cookielaw.org https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net 'unsafe-inline'; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://widget.moin.ai https://css.zohocdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://jquery.app https://www.jqueryscript.net https://stackpath.bootstrapcdn.com; img-src * 'self' data:; font-src 'self' https://fonts.gstatic.com https://widget.moin.ai https://se-content-b.psplugin.com https://content.psplugin.com https://css.zohocdn.com; connect-src * 'self' https://unilabs.com https://maps.go