indexo.dev

mawebmutuelle.fr

.fr crawl

First seen 2026-06-02 · Last seen 2026-06-02 · ok HTTP/1.1 200 230 ms crawled 2026-06-03

FR · 46.16.46.42 · AS197369 SAS Proginov

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Accédez aux services de votre espace adhérent - Ma Web Mutuelle
Description
Dans votre espace adhérent Ma Web Mutuelle, consultez vos remboursements, vos documents et contacts privilégiés de manière sécurisée et effectuez vos démarches 24h/24 7j/7.
Language
fr

Technology

Server
Heimdall
jQuery
3.2.1 known XSS (<3.5)
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • fonts.googleapis.com×2
  • cdn.jsdelivr.net×1
  • fonts.gstatic.com×1

Registration

Registrar
GANDI
Created
2011-01-11
Expires
2026-06-28 21 days left
Updated
2026-04-29
Name servers
  • ns-164-c.gandi.net
  • ns-222-a.gandi.net
  • ns-6-b.gandi.net

DNS records live

NS
  • ns-164-c.gandi.net
  • ns-222-a.gandi.net
  • ns-6-b.gandi.net
MX
  • 0 mawebmutuelle-fr.mail.protection.outlook.com
TXT
  • v=DMARC1; p=none; sp=none; rua=mailto:noreply@mawebmutuelle.fr!10m; ruf=mailto:noreply@mawebmutuelle.fr!10m; rf=afrf; pct=100; ri=86400
Verified for
  • Brevo

Email authentication partial

SPF
v=spf1 include:spf.giesima.fr include:spf.protection.outlook.com include:spf.brevo.com -all
strict (-all)
DMARC
v=DMARC1; p=none
policy: none (monitoring only)
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

GandiCert
from 2025-06-10 to 2026-07-12
Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://mawebmutuelle.fr/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-content-type-options
nosniff
content-security-policy
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://essenzamutuelle.fr https://plurimamutuelle.fr https://nobeliamutuelle.fr https://gestion.mawebmutuelle.fr https://intranet.mawebmutuelle.fr;
strict-transport-security
max-age=31536000; includeSubDomains

Linked from (1)

Use this data via API

Everything on this page for mawebmutuelle.fr is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/mawebmutuelle.fr" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →