toutsurmoneau.fr

.fr crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1192 ms crawled 2026-05-19

US · 104.18.2.131 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Tout Sur Mon Eau - SUEZ
Description: Tout savoir sur l'eau dans votre commune. Etre accompagné dans vos démarches. Accéder à votre compte en ligne et à tous nos services.
Language: fr
Canonical: https://www.toutsurmoneau.fr/

Technology

CDN: Cloudflare

Third-party hosts loaded (1)

challenges.cloudflare.com×1

Registration

Registrar

BDL SYSTEMES dba Systonic

Created

2013-07-02

Expires

2026-06-23 33 days left

Updated

2025-11-22

Name servers

sean.ns.cloudflare.com
walk.ns.cloudflare.com

DNS records live

NS

sean.ns.cloudflare.com
walk.ns.cloudflare.com

MX

0 mxa-0054c103.gslb.pphosted.com
0 mxb-0054c103.gslb.pphosted.com

TXT

fqqcdxwrkfvcw647zqmmjvg2r23016pm
x59gzsy6c9vn95n92pmdy7ncxrts79dg

Verified for

Google
Microsoft 365

Email authentication partial

SPF: v=spf1 include:spf.akio-solutions.com include:spf-0054C103.pphosted.com -all
strict (-all)
DMARC: v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-08 to 2026-08-06

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.toutsurmoneau.fr/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; child-src data: blob:; connect-src 'self' *.aticdn.net *.cdnbasket.net *.cookiebot.com *.googleapis.com *.hotjar.com *.hotjar.io *.onconnect-coach.3slab.fr *.payline.com *.suez.com *.xiti.com bam.eu01.nr-data.net bam.nr-data.net data.gouv.nc ids.cdnwidget.com payline.com smartsolution-onconnectcoach.azureedge.net smartsolution-smartcoach.azureedge.net stats.g.doubleclick.net ws.livingactor.com data.gouv.nc *.aticdn.net *.xiti.com stats.g.doubleclick.net *.cookiebot.com *.googleapis.com *.suez.com wss://*.hotjar.com actorssl-5637.kxcdn.com *.myfeelback.com *.skeepers.io *.jsdelivr.net *.jsdelivr.net general-runtime.voiceflow.com *.baker-park.com *.voiceflow.com runtime-api.voiceflow.com suez-search-engine.baker-park.com wss://*.voiceflow.com wss://*.baker-park.com; font-src 'self' data: *.hotjar.com *.payline.com *.suez.com fonts.gstatic.com payline.com smartsolution-onconnectcoach.azureedge.net *.suez.com actorssl-5637.kxcdn.com *.myfeelback.com *.skeepers.io cdn.vo
strict-transport-security: max-age=15552000