Security Review

Is cnil.fr legit or a scam?

Our verdict:Safe· 94/100

Official website of the French Data Protection Authority (CNIL), a highly trusted government entity with a 28-year domain history and clean security scans.

cnil.frScanned 1h ago
0
Trust score
SAFE
Heuristics 92·MT 95
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
29 years old
Registered Oct 28, 1997
MT Intelligence
Safe
Low likelihood · 100% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of cnil.fr
LIVE RENDER
cnil.fr

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust95/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain is the official digital home of the Commission Nationale de l'Informatique et des Libertés, established by French law in 1978. Our analysis confirms the domain has been registered for over 10,000 days and is owned by the French State. Every engine in our antivirus network identifies the site as clean, and it maintains a high global traffic ranking. While our research found mentions of scams, these are external actors impersonating the CNIL via phone or email, not the website itself. The site is a primary source for reporting such fraud and exercising legal data rights.
Full dossier
Analysis complete

Page Content

The page serves as a comprehensive portal for data privacy, offering resources for individuals and professionals. It includes sections on digital security, AI guidelines, and legal rights like data rectification and deletion. The content is professionally maintained in both French and English.

Infrastructure

The site is hosted on a stable IP with a perfect reputation score and zero abuse reports. It uses a high-grade SSL certificate issued by Sectigo, ensuring all communications are encrypted. The presence of official government links and social media integration further confirms its authenticity.

Domain History

Registered nearly 28 years ago, the domain shows exceptional longevity and stability. It is registered to the French State under the authority of the CNIL President, which is a definitive indicator of legitimacy for a public institution.

Web Reputation

The domain is widely recognized as an authoritative source by major browser blocklists and independent review aggregators. It holds a significant position in global traffic indexes, reflecting its role as a critical regulatory body in the European Union.
Risk Factors
1
  • None detected; the site is an official government authority.
Positive Signals
5
  • Official government domain owned by the French State.
  • Over 28 years of continuous domain registration history.
  • Zero detections across 92 antivirus engines in our network.
  • High global traffic ranking and established public reputation.
  • Valid, high-assurance SSL certificate.
AI Recommendation
You can safely use this website to learn about your data rights or to file official privacy complaints.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for cnil.fr, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
28 yrs
Registered Oct 1997
Business registration
Active · France
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 2 positive
Key findings
7 headline facts from open-web research
  • cnil.fr is the official website of the Commission Nationale de l'Informatique et des Libertés (CNIL), France's independent data protection authority established in 1978.
  • Domain age approximately 28 years (over 10,000 days as provided), owned by the French State / CNIL.
  • Scamadviser rates it as very likely safe/legit with high traffic (Tranco rank ~500), valid SSL certificate, and long history.
  • CNIL actively warns about scams impersonating it (e.g. fake GDPR compliance offers via email, phone, or letters demanding payment).
  • No evidence of the domain itself being used in scams; instead, it is the source of official guidance on data rights, complaints, and recognizing phishing.
  • Listed on official French government sites (info.gouv.fr, service-public.gouv.fr) as the authoritative source for data protection.
  • Maintains active presence with annual reports, sanctions, AI guidelines, and public resources in French and English.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • service-public.gouv.fropen

    "The scam can also be done through a phone call. In this case, the interlocutor pretends to be a member of the CNIL or a business mandated by the CNIL."

  • economie.gouv.fropen

    "La CNIL ne demande jamais la communication de vos coordonnées"

Positive reviews (2)
Quotes indicating the site is legitimate.
  • scamadviser.comopen

    "In summary, It seems that cnil.fr is legit and safe to use and not a scam website."

  • Wikipediaopen

    "The Commission nationale de l'informatique et des libertés is an independent French administrative regulatory body whose mission is to ensure that data privacy law is applied to the collection, storage, and use of personal data. It is the n"

Business registration
Status: active · France

Official independent administrative authority (autorité administrative indépendante) created by loi n° 78-17 of 6 January 1978; owner of cnil.fr is Etat français represente par le president de la CNIL

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Official Status

Our research confirms cnil.fr is the official website of the Commission Nationale de l'Informatique et des Libertés, France's independent data protection authority. It is cited as the authoritative source by official French government portals and Wikipedia.

Impersonation Warnings

We found alerts on government news sites regarding 'GDPR scams' where fraudsters pretend to be CNIL agents. These reports serve to protect the public and reinforce that the actual cnil.fr domain is the only legitimate source for these services.

Trust Indicators

Independent review aggregators and traffic analyzers rank this domain as highly trustworthy with significant monthly visitors.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles2
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Links to 2 social profiles.

Domain & Encryption

Domain History
Age29 years old
RegistrarDIGITAL RURAL INFORMATIQUE
RegisteredOct 28, 1997
ExpiresApr 18, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerSectigo (Europe) SL · Sectigo Qualified Website Authentication CA R39
ExpiresNov 21, 2026 (152d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
Platform / CMSDrupal
PopularityNot in popularity top list

Redirect Chain

Hops
2
Cross-domain
No
Lookalike
No
Punycode
No
  • 1308http://cnil.fr/
  • 2301https://cnil.fr/
  • 3200https://cnil.fr/fr

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on cnil.fr and not a lookalike like c-nil.fr.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on cnil.fr. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • cnil.fr passed our automated security checks with a trust score of 94/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. cnil.fr presents a valid TLSv1.3 certificate issued by Sectigo (Europe) SL · Sectigo Qualified Website Authentication CA R39, expiring in 152 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • cnil.fr is 28.7 years old, registered on 10/28/1997 through DIGITAL RURAL INFORMATIQUE. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report cnil.fr as clean.
  • No. cnil.fr is not currently listed on the major browser blocklist feeds that modern browsers use.
  • cnil.fr resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 21, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around cnil.fr have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·cnil.fr
SAFE

This is the official website of the French data protection authority (CNIL). It is a highly reputable government resource with over 28 years of history and no security risks. You can safely browse this site for information on data privacy rights.

You can safely use this website to learn about your data rights or to file official privacy complaints.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.