Detect Cloudflare
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Detection looks at response headers, cookies, meta tags, javascript globals, dom selectors, dns records across 9 fingerprint rules among the site's public responses.
01
Websites using Cloudflare
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Cloudflare. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Cookies
- Meta tags
- JavaScript globals
- DOM selectors
- DNS records
03
Example public indicators for Cloudflare
Illustrative indicators derived from public catalog metadata for Cloudflare. A live scan may match additional proprietary rules beyond these examples.
- server: cloudflare
- cf-cache-status
- cf-ray
- __cfduid
- image: //cdn.cloudflare
- CloudFlare
- img
- NS: .cloudflare.com
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Cloudflare signature (9 rules) at the time of the scan.
- Does not establish
- A sitewide install of Cloudflare, an active vendor contract, exclusive use, or that Cloudflare is still in place today.
05
How to check a site for Cloudflare
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Cloudflare signals.
- 2. PluginView reads only public responses (response headers, cookies, meta tags) and scores them against the Cloudflare signature set (9 rules).
- 3. Review the confidence score and text explanation for Cloudflare on the results page.
06
FAQ: detecting Cloudflare
- Can PluginView detect Cloudflare without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Cloudflare — typically response headers, cookies, meta tags, javascript globals. It does not bypass authentication or paywalls.
- What category is Cloudflare?
- Cloudflare is classified under CDN in the PluginView directory.
- How many fingerprint rules cover Cloudflare?
- This reference currently tracks 9 fingerprint rules across response headers, cookies, meta tags, javascript globals, dom selectors, dns records. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Cloudflare?
- Illustrative public indicators for Cloudflare include server: cloudflare; cf-cache-status; cf-ray. A live scan may match additional proprietary rules beyond these examples.
