technology software

English

signin_authorize_state

next_workflow_login

w_uuid

ns_af

Domain 'account.withings.com' uses the commercial generic top-level domain (.com) and includes subdomain 'account'. The second-level label 'withings' is 8 characters long containing 2 vowels alongside six consonants. Word splitting yields 2 words: wi, things. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

html/8b/47/8b476b8d-8aae-40be-b9ac-93c803f2011a_fallback.html.gz

My account

email

html/8b/47/8b476b8d-8aae-40be-b9ac-93c803f2011a.html.gz

frame-ancestors 'self' https://app.withings.com/ https://www.withings.com/  https://care.withings.com/

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access

38c83e6179030118542b1ae9cd014b27247b11602b1f7984a0f73ff1c4b95a29

e33f3594a1ef6aa538bc08fbe274d3cedc9d63983e51fafdb0ec8054b1de6d3a

106e5175d00f1b8e4e04534ff102a0786a145f08e03bec47fc0b6acce71093ac

a744c96451d87a4b2b54c7327600a5d6dd20cb37bf573d4dd01771862581ea73

db4fb4dc9463f821983231a0891141d6aa0afe528f9f1806f117cc2bd3a379fc

53c62a25373555c1d9d1f20e31c33c664e8525acd23ec63f8c17aea2f38daa1f

f68eb452e64c67dd1fa904bc0fc2dfd37db74572331d91c7d503172f1516b125

39c867a4a057cff7af9dea7acbf65d778f2bcfdc7a6cba188ac3a9720ed17338

7c8a465edf65d060269ae778dc0299e73e3000341a2aa60feddb390530bbe0e1

23718326caa321d1363c33bce411479453ece4f4081d59dc5ec0340504e02de3

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Gandi SAS

WITHINGS.COM

BSO Communication NOC

Michael Ourabah

Charles-Antoine Beyney

Maxime PERETTE

BSOCOM-MNT

Benoit Delmas

WITHINGS


    const emailForgottenWrapper = document.querySelector('#email-forgotten');

    emailForgottenWrapper.addEventListener('click', function(e) {
        if (e.target === emailForgottenWrapper) {
            emailForgottenWrapper.classList.remove('active');
        }
    });



			const apiUrl = "https://scalews.withings.com/cgi-bin/";
		


			constants.REV       = "e274b4a8";
			constants.COOKIE_CONSENT_DOMAIN = "withings.com";
			const IS_PARTNER =  false;
			csrf_token = "";

			
			// TODO: rework this script. Disabled because lost focus on mobile phone
			// Prevent autofill to stick to the inputs on scrolling sidebar
			// const hasInputOnPage = document.querySelector('input');

			// if (hasInputOnPage) {
			// 	const sidebar = document.querySelector('.sidebar-component');

			// 	if (sidebar) {
			// 		sidebar.addEventListener('scroll', () => {
			// 			const activeInput = document.querySelector('input:focus');
			// 			if (activeInput) activeInput.blur();
			// 		});
			// 	}
			// }
		


			window.onerror = function (msg, url, noLigne, noColonne, error) {
				var message = [
					"Message : " + msg,
					"Ligne : " + noLigne,
					"Colonne : " + noColonne,
					"Objet Error : " + JSON.stringify(error),
				].join(" - ");

				callLog('error', message)
			};
		

HSTS

✅ Low Risk - https://account.withings.com/

Requests	IP Address	Location	AS Autonomous System
17	89.30.121.150	France	AS4455IX Reach Ltd
2	142.250.186.46	United States	AS15169GOOGLE
2	2a01:8200:1001:1:89:30:121:180	France	AS31216BSO Network Solutions SAS
2	2a00:1450:4001:811::200e	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
2	2a01:8200:1001:1:89:30:121:181	France	AS31216BSO Network Solutions SAS
2	2a01:8200:1001:1:89:30:121:150	France	AS31216BSO Network Solutions SAS
2	89.30.121.180	France	AS4455IX Reach Ltd
1	89.30.121.181	France	AS4455IX Reach Ltd
20	8	-	-

Security Scan Report: account.withings.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History