unilabs.nl

HTML metadata

Title

Home | Unilabs Nederland

Language

en

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://unilabs.nl/

Translations

en ×3
es ×2
fr ×2
da
de
fi
it
nb
sv

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (15)

unilabs.ch×3
unilabs.com×2
cdn.cookielaw.org×1
fonts.googleapis.com×1
static.addtoany.com×1
unilabs.ae×1
unilabs.co.uk×1
unilabs.dk×1
unilabs.fi×1
unilabs.fr×1
unilabs.no×1
unilabs.pe×1
unilabs.se×1
www.googletagmanager.com×1
www.unilabs.es×1

Registration

Registrar

Abion AB

Created

2007-10-04

Updated

2026-01-22

Name servers

phoenix.ns.cloudflare.com
dean.ns.cloudflare.com

DNS records live

NS

dean.ns.cloudflare.com
phoenix.ns.cloudflare.com

MX

0 unilabs-nl.mail.protection.outlook.com

TXT

_8mrkmrhx6vneljs0uanrv6faw4m2c9t

Verified for

Brevo
Microsoft 365

Email authentication partial

SPF

v=spf1 mx include:_spf.zivver.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzonEZY0MFTuzPPHK91ymUb2fOYT2+UTJdQZyiugzUltm2hU5iJ7aXmpemzSC46XX1AYAZTX6M7Gjg0…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ntEcrRWJdC1zzK2wanUcY3PDm3Xi2Fyr4sqqdOOnYxzFgehuWRYzmyJF4xoe0PNPyEAGw+g1xusOT…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoHOqynXx5rThxbiMoIAAn9nvHm7m8bl9aaFulDLQD8z/oX7QXMXapoM1XJujOOKwLIYI4ca3JTM4e5/S+…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78kydcl1LDOb5LDcnaDnWt5usnDhGSuqcER2gU8vatXH1/hp0wppTupmGSTqMrLrN+EIU6LaO4AlPYFK2K…

selectors probed

Certificate (current)

WE1

from 2026-03-22 to 2026-06-20

Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://unilabs.nl/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: autoplay=(), geolocation=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' 'unsafe-inline' data: gap: https://ssl.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem * https://fonts.googleapis.com httpfs://static.addtoany.com/https://cdn.cookielaw.org https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net 'unsafe-inline'; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://widget.moin.ai https://css.zohocdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://jquery.app https://www.jqueryscript.net https://stackpath.bootstrapcdn.com; img-src * 'self' 'unsafe-inline' data:; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://widget.moin.ai https://se-content-b.psplugin.com https://content.psplugin.com htt