axa.com

HTML metadata

Title: AXA's Corporate Website | AXA
Description: Present in 52 countries, AXA's 156,000 employees and distributors are committed to serving our +92 million clients. Our areas of expertise are applied to a range of products and services that are adapted to the needs of each and every client across three major business lines: property-casualty insurance, life, savings & health and asset management.
Language: en

Open Graph

url: https://www.axa.com/en
title: AXA's Corporate Website
locale: en
site name: AXA.com
description: Present in 52 countries, AXA's 156,000 employees and distributors are committed to serving our +92 million clients. Our areas of expertise are applied to a range of products and services that are adapted to the needs of each and every client across three major business lines: property-casualty insurance, life, savings & health and asset management.

Technology

Server: aws
CMS: Next.js

Third-party hosts loaded (1)

images.prismic.io×26

Social

Registration

Registrar

MarkMonitor Inc.

Created

1995-10-24

Expires

2026-10-23 156 days left

Updated

2025-12-02

Name servers

a1-179.akam.net
a10-65.akam.net
a2-64.akam.net
a20-65.akam.net
a5-67.akam.net
a7-67.akam.net

DNS records live

NS

a1-179.akam.net
a10-65.akam.net
a2-64.akam.net
a20-65.akam.net
a5-67.akam.net
a7-67.akam.net

MX

10 mxa-00181c02.gslb.pphosted.com
10 mxb-00181c02.gslb.pphosted.com

TXT

Show 27 TXT records

_gg3m5znrxqe8jd39rb6ntyh5nfahncc
Dynatrace-site-verification=e5bbe53b-0e26-43f8-8908-86effa045316__avksq8anamb0o64carna3bfa6g
_vmlv5fxdvrxbpwrrecjd120ooapsrw2
postman-domain-verification=f8434ff8fde864eefeb60e588c7a57ce1cd7cc3a1a2c0dffefd5b67a1346efd83f10e13fa1813443bd3a8ee21b2c4e33b01b01aa3e68507e12fb045bbea7914d
apple-domain-verification=LMBXViiBAvAHMWDd
4a8a4a5e-571a-40de-8eee-e78014c320aa
mongodb-site-verification=lupQBw0MxwKjJ27gsLGxQ0NGQrSjDgSm
hpe-greenlake-domain-verification=584e68365a3746654e3261446c32366f58523339574a51396f3578733870594b
mongodb-site-verification=dU64HiOA4njtD9vSJe8tJJxVZHxHoecy
google-site-verification=HZWLsW35ZMMZKfKaYbaVfbGkIq7MbijBLeyL8By_LSQ
Dynatrace-site-verification=ed1b155d-fee6-498c-803a-b7e56cc2be4c__8dqq29ns71fh9h649ul2mmbefb
atlassian-domain-verification=3YSUX6Q4m/eHYKJkIX63SEFyCodayom6rhGPvj7cgiaPCO1lv2974qe0EADerxsx
google-site-verification=dQYDVHiDJ4L5rHOj305-4EC8Y8csGaULrzZLdxv4jZk
adobe-idp-site-verification=aa1314cafcf8b9ecf98ea6890b06b182059463ec06855bb984cbfa9cfdab760c
apple-domain-verification=Y5HKdqkrFTFC30Ni
Sendinblue-code:18cfb832b593c632d3154efb0dd1fa72
flexera-domain-verification-eubzhmnzvzrhboqp
google-site-verification=2-51qSumVeu-DgaZ0HkDvuoeN6wTFle6tw7GsKRGjFk
_6werbmdc6r2wlk4vbeei0th8zzmd4yh
datadome-domain-verify=yualCWSZfM2sxHmfdjgAWTMD1YQwTb0z
Dynatrace-site-verification=5d027638-a673-4fae-b74c-385402aee579__jkimacqabokkd9b6hasvquas23
Dynatrace-site-verification=8a8ff2cc-0fa3-41ab-9f3a-cfddd67808d7__9pgiqks00vlqkmeh5067r47ehn
ms-domain-verification=7e6ce714-2e8c-45fe-beea-48299ea393d4
Dynatrace-site-verification=9e20c7e2-7909-48d2-a027-1e3060608182__k3ovcdqpc2k0fq9krrvocpsva9
MS=ms26188971
Dynatrace-site-verification=dedaccf9-7047-4480-a93e-5a305a69a01a__qlgip6i6qgji30o78c0trimm1m
Dynatrace-site-verification=829d2d76-190b-4061-95e4-6515c7e71d12__2hh9jahrnhslcbhea9obg3t4f9

Email authentication partial

SPF

v=spf1 ip4:171.18.34.0/24 ip4:163.156.213.128/25 ip4:171.18.28.6 ip4:213.181.52.220 ip4:213.181.52.221 ip4:213.181.53.221 ip4:213.181.53.220 include:_spf.axa.com include:spf.sendinblue.com ip4:171.18.24.12 include:spf-csod.axa.com include:spf-a.axa.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; fo=1; pct=100; rua=mailto:dmarc.report@axa.com,mailto:ewai10d2@ag.eu.dmarcian.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc.failure.axa@axa.com

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
mail: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pTYVs8jPb0X2BpBNuHeY/8D02sP4dBP32wGcObwtzUir9zMMpLcXcQnEfbM7R7LaS2cIdoVlpVkvMMy56…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriob7h3+tVJXK3c3QP9HeLdtXRDFUz0uPb8If7LjKxGxpERWCvO0n/3lq53BQblBBQX4jPyYMaKSLyGoz3…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-05-28 to 2026-06-20

Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.axa.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self' * data: 'unsafe-inline' 'unsafe-eval';
strict-transport-security: max-age=31536000; includeSubDomains