mandelieu.com
FMandelieu Tourism
Your stay on the Côte d'Azur in Mandelieu is an opportunity to enjoy the Mandolocian decor, sea side and land side
Last scanned 47 min agoCompare with another site →
Built with
- CMS
- WordPress
Also detected
- Libraries
- jQuery
- Infrastructure
- Varnish
- Third-party services
- Facebook Pixel · Google Tag Manager
Overview
- Status
- alive
- Registered
- 1998-07-27 (28 years ago)
- First seen here
- 2026-09-22
- Security grade
- F (50/100, from headers & TLS)
- Privacy score
- 48/100 (5 third-party script hosts, 2 tracking/marketing services)
- Hosting
- OVH SAS · AS16276 · Ireland
- Server header
gtranslate- Response time
- 45 ms to first byte, measured from our crawler
- TLS certificate
- Let's Encrypt · TLSv1.3 · expires 2026-11-29
- Language
- en
- Mobile-ready
- yes (viewport meta tag)
- Structured data
- WebPage · ImageObject · BreadcrumbList · WebSite · TouristInformationCenter
- Linked to from
- 22 other sites seen so far
Loads scripts from
Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.
What to fix
- Add Strict-Transport-Security
Header: Strict-Transport-Security: max-age=31536000; includeSubDomains - Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test. - Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff - Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin
Security & email signals
- ✓ HTTPS
- ✗ HSTS
- ✗ Content-Security-Policy
- ✗ X-Content-Type-Options
- ✓ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✓ SPF record
- ✓ DMARC record
- ✗ DKIM record
- ✓ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Badge
Show this site's security grade in a README or footer:
<a href="https://webtelemetry.dev/site/mandelieu.com"><img src="https://webtelemetry.dev/badge/mandelieu.com.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.