Is cloudflare.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 18+ years ago; no impersonation patterns detected; not listed on URLhaus malware blocklist. Minor issues: no privacy policy found; no terms of service found.
Positive highlights
- Domain registered 18+ years agoLong-established domains are far less likely to be disposable scams.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - G2, valid for 0 remaining days.
- Site responded with 200Final URL: https://www.cloudflare.com/. Response time 90ms.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (90ms)
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
- DMARC published (reject)
Negative highlights
- No privacy policy foundLegally required in most jurisdictions. Its absence is a real red flag.
- Certificate expires soon (0 days)
- No terms of service foundReputable sites usually publish a terms of service.
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: 1017+ URLs indexed. A large sitemap suggests an established, content-rich site.
Note: Registered via Cloudflare, Inc..
Note: 6 technologies detected. Astro, Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare
Key facts about cloudflare.com
- Website
- cloudflare.com
- Popularity
- Not checked
- Domain created
- Feb 17, 2009 (17.7 years old)
- Domain expires
- Feb 17, 2033
- Registrar
- Cloudflare, Inc.
- Owner details
- Public in WHOIS
- IP address
- 104.16.133.229
- Hosting / CDN
- Cloudflare
- SSL certificate
- GlobalSign nv-sa · valid until Oct 11, 2015
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- Astro, Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare
Summary
94/100 — trusted. Long-established domain (17.7 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- Cloudflare, Inc.
- Creation Date
- February 17, 2009 (17.7 years ago)
- Last Updated
- January 9, 2024
- Registry Expiry Date
- February 17, 2033
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
accept-ranges: bytes
age: 3
cache-control: max-age=10
cf-cache-status: HIT
cf-ray: a59db041689536d2-YYZ
connection: close
content-length: 1334957
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https: wss://*.qualified.com wss://*.registrar.cloudflare.com; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests
content-type: text/html; charset=utf-8
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
date: Fri, 13 Nov 2026 12:13:06 GMT
link: <https://www.cloudflare.com/.well-known/api-catalog>; rel="api-catalog", <https://www.cloudflare.com/.well-known/agents.json>; rel="service-desc", <https://www.cloudflare.com/.well-known/webmcp.json>; rel="service-desc", <https://www.cloudflare.com/openapi.json>; rel="service-desc", <https://www.cloudflare.com/llms.txt>; rel="service-doc", <https://www.cloudflare.com/sitemap.xml>; rel="sitemap", </fonts/Kunst%20Grotesk%20Regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </fonts/Kunst%20Grotesk%20Medium.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://ot.www.cloudflare.com>; rel=preconnect; crossorigin, <https://imagedelivery.net>; rel=preconnect; crossorigin, </static/hero-poster.avif>; rel=preload; as=image; type="image/avif"; fetchpriority=high
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
permissions-policy: geolocation=(), camera=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=icbGhtHmbFfB1HIg2ZXJKF%2BHlkJ%2B%2BYuA1nHRb1A6tKBVwDQWHb666H7rsFuZur4JBNGHBtKYjjj3nb6VyDnU7jHudex9pBMULEY8%2BrhRih9vAisbfAOwjbgULgDgz0%2BiFWKf1dR4PH5U7Io2X1iKHg%3D%3D"}]}
server: cloudflare
set-cookie: _ga=GA1.1.bafa5d43-4046-432f-9e18-0c09abf99bcb; Expires=Mon, 13 Dec 2027 12:13:06 GMT; Path=/
strict-transport-security: max-age=31536000; includeSubDomains
vary: accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-rm: GW
x-served-by: marketing-site
x-xss-protection: 1; mode=blockDNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 104.16.133.229, 104.16.132.229
- IPv6 Addresses (AAAA)
- 2606:4700::6810:85e5, 2606:4700::6810:84e5
- Mail Servers (MX)
- mxa-canary.global.inbound.cf-emailsecurity.net (Priority: 5), mxb-canary.global.inbound.cf-emailsecurity.net (Priority: 5), mxa.global.inbound.cf-emailsecurity.net (Priority: 10), mxb.global.inbound.cf-emailsecurity.net (Priority: 10)
- Authoritative Nameservers (NS)
- ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
- TXT Records Found
- 29 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- cloudflare.com
- Registrar Organization
- Cloudflare, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
- Registration Lifecycle
- Registered: 2009 → Expires: 2033
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
- DKIM Selectors Detected
- s1
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- cloudflare
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- Cloudflare: Build for the agent era
- Meta Description
- Welcome to Cloudflare - Powering the next generation of applications
- Document Language
- en
- Character Encoding
- UTF-8
- Viewport Setting
- width=device-width, initial-scale=1.0, viewport-fit=cover
- Generator Software
- Astro v6.3.7
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 90 ms
- Payload Body Size
- 1303.7 KB
- Compression Status
- Uncompressed
- Cache Directives
- max-age=10
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
94/100 — trusted. Long-established domain (17.7 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 18+ years ago; no impersonation patterns detected; not listed on URLhaus malware blocklist. Minor issues: no privacy policy found; no terms of service found.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 3,335 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 104.16.133.229
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.cloudflare.com/
- Redirect Hop Count
- 1 hop
- 1.https://cloudflare.com/ → https://www.cloudflare.com/
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - G2
- Subject Common Name (CN)
- ssl2081.cloudflare.com
- Validity Period
- 0 days remaining (Expires: 2015-10-11T19:11:16)
- Subject Alternative Names (SANs)
- 25 domains protected
- Certificates Logged (CT)
- 4978 certs recorded
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Phone Numbers
- 0 0 341 156, 275.125 68.25, 242.999 148.76, 307.33 119.813, 281.059 112.601, 268.195 71.0866
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.cloudflare.com/sitemap.xml
- Disallow Rules Count
- 0 rules
View Raw robots.txt
# Robots.txt for www.cloudflare.com User-agent: * Allow: / # Sitemap Sitemap: https://www.cloudflare.com/sitemap.xml # AI/LLM friendly content # See https://llmstxt.org for the llms.txt specification # llms.txt provides curated content for AI assistants and LLMs # Allow AI crawlers to access markdown versions of pages User-agent: GPTBot Allow: / User-agent: ChatGPT-User Allow: / User-agent: Google-Extended Allow: / User-agent: Anthropic-AI Allow: / User-agent: Claude-Web Allow: / User-agent: CCBot Allow: / User-agent: PerplexityBot Allow: / User-agent: Cohere-ai Allow: / # Content Signals — declare AI content usage preferences # See https://contentsignals.org/ and https://datatracker.ietf.org/doc/draft-romm-aipref-contentsignals/ Content-Signal: ai-train=yes, search=yes, ai-input=yes # AI-friendly content locations # - /llms.txt - Curated overview for AI/LLMs (markdown) # - /llms-full.txt - Full expanded content for larger context windows # - /*.md - Markdown versions of all pages (append .md to any URL) # - /.well-known/agents.json - Agent discovery and capabilities
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of cloudflare.com
No reviews yet. Be the first to share your experience.