Skip to main content

Is cloudflare.com safe?

Very Likely Safe

No major red flags found. This looks like a legitimate, established website.

Checked Nov 13, 2026

Why: Main reasons: domain registered 18+ years ago; no impersonation patterns detected; not listed on URLhaus malware blocklist. Minor issues: no privacy policy found; no terms of service found.

Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency61/100
Security100/100
Email100/100

Positive highlights

  • Domain registered 18+ years agoLong-established domains are far less likely to be disposable scams.
  • HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
  • Valid SSL / TLS certificate activeIssued by C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - G2, valid for 0 remaining days.
  • Site responded with 200Final URL: https://www.cloudflare.com/. Response time 90ms.
  • No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
  • Not listed on URLhaus malware blocklist
  • Fast response (90ms)
  • Not present in PhishStats phishing feed
  • HSTS is setTells browsers to only use HTTPS for this domain.
  • DMARC published (reject)

Negative highlights

  • No privacy policy foundLegally required in most jurisdictions. Its absence is a real red flag.
  • Certificate expires soon (0 days)
  • No terms of service foundReputable sites usually publish a terms of service.
  • Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.

Note: 1017+ URLs indexed. A large sitemap suggests an established, content-rich site.

Note: Registered via Cloudflare, Inc..

Note: 6 technologies detected. Astro, Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare

Key facts about cloudflare.com

Website
cloudflare.com
Popularity
Not checked
Domain created
Feb 17, 2009 (17.7 years old)
Domain expires
Feb 17, 2033
Registrar
Cloudflare, Inc.
Owner details
Public in WHOIS
IP address
104.16.133.229
Hosting / CDN
Cloudflare
SSL certificate
GlobalSign nv-sa · valid until Oct 11, 2015
Email security
SPF ✓ · DMARC ✓ (reject)
Threat blocklists
Not listed (clean)
Technology
Astro, Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare

Summary

94/100 — trusted. Long-established domain (17.7 years old), clean threat reputation, no impersonation patterns.

No malware/phishing on feedsGood reputationHTTPS enabled

Full technical report

Domain Information

Registration timeline, age calculation, registrar details, and ICANN status.

Verified
Registrar Name
Cloudflare, Inc.
Creation Date
February 17, 2009 (17.7 years ago)
Last Updated
January 9, 2024
Registry Expiry Date
February 17, 2033
WHOIS Privacy Protection
Publicly Visible
Domain Status Codes
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 18+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Cloudflare, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2

HTTP Headers & Security

Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.

Good
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
All Response Headers (26)
accept-ranges: bytes
age: 3
cache-control: max-age=10
cf-cache-status: HIT
cf-ray: a59db041689536d2-YYZ
connection: close
content-length: 1334957
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https: wss://*.qualified.com wss://*.registrar.cloudflare.com; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests
content-type: text/html; charset=utf-8
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
date: Fri, 13 Nov 2026 12:13:06 GMT
link: <https://www.cloudflare.com/.well-known/api-catalog>; rel="api-catalog", <https://www.cloudflare.com/.well-known/agents.json>; rel="service-desc", <https://www.cloudflare.com/.well-known/webmcp.json>; rel="service-desc", <https://www.cloudflare.com/openapi.json>; rel="service-desc", <https://www.cloudflare.com/llms.txt>; rel="service-doc", <https://www.cloudflare.com/sitemap.xml>; rel="sitemap", </fonts/Kunst%20Grotesk%20Regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </fonts/Kunst%20Grotesk%20Medium.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://ot.www.cloudflare.com>; rel=preconnect; crossorigin, <https://imagedelivery.net>; rel=preconnect; crossorigin, </static/hero-poster.avif>; rel=preload; as=image; type="image/avif"; fetchpriority=high
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
permissions-policy: geolocation=(), camera=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=icbGhtHmbFfB1HIg2ZXJKF%2BHlkJ%2B%2BYuA1nHRb1A6tKBVwDQWHb666H7rsFuZur4JBNGHBtKYjjj3nb6VyDnU7jHudex9pBMULEY8%2BrhRih9vAisbfAOwjbgULgDgz0%2BiFWKf1dR4PH5U7Io2X1iKHg%3D%3D"}]}
server: cloudflare
set-cookie: _ga=GA1.1.bafa5d43-4046-432f-9e18-0c09abf99bcb; Expires=Mon, 13 Dec 2027 12:13:06 GMT; Path=/
strict-transport-security: max-age=31536000; includeSubDomains
vary: accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-rm: GW
x-served-by: marketing-site
x-xss-protection: 1; mode=block
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2

DNS Records

Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.

Resolved
IPv4 Addresses (A)
104.16.133.229, 104.16.132.229
IPv6 Addresses (AAAA)
2606:4700::6810:85e5, 2606:4700::6810:84e5
Mail Servers (MX)
mxa-canary.global.inbound.cf-emailsecurity.net (Priority: 5), mxb-canary.global.inbound.cf-emailsecurity.net (Priority: 5), mxa.global.inbound.cf-emailsecurity.net (Priority: 10), mxb.global.inbound.cf-emailsecurity.net (Priority: 10)
Authoritative Nameservers (NS)
ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
TXT Records Found
29 TXT verification records
A Records (IPv4)
104.16.133.229104.16.132.229
TXT Verification Records
MS=ms70274184
_neqmkgaq1lq9it5s8qmetrhbnu121wb
_wkjc0fot0d7qrvrdt78bxkj2e2o67d2
ZOOM_verify_7LFBvOO9SIigypFG2xRlMA
asv=894f6d1f9f83bcf44e4b1bc40bc1c4aa
apple-domain-verification=DNnWJoArJobFJKhJ
status-page-domain-verification=r14frwljwbxs
jamf-site-verification=c-eUvHBbhgFxMulFSY-QJQ
canva-site-verification=oOyaVnHC-OiFoR1BPvetNA
docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10c
miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356
facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo
databank-domain-verification-hkehd2=fzgu4kmbZwMoW99zENgO4u8NL
onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cb
uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0f
logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654
creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7
google-site-verification=C7thfNeXVahkVhniiqTI1iSVnElKR_kBBtnEHkeGDlo
google-site-verification=ZdlQZLBBAPkxeFTCM1rpiB_ibtGff_JF5KllNKwDR9I
liveramp-site-verification=EhH1MqgwbndTWl1AN64hOTKz7hc1s80yUpchLbgpfY0
stripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623
stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9
drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f
cisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72
atlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xB
_saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457
DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/dba6756ad312fc13c45f705cf7f5e87f4d658be016c41f950329aa4085b3abc1
DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/ebec933773c69c93420d13e6776adb8c4a190f6281f9d132bcebd7dcb0967bdd
v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
5 authoritative nameservers
+2

WHOIS & Identity Lookup

Domain ownership status, registry lifecycle, nameservers, and privacy redaction.

Found
Registrable Domain
cloudflare.com
Registrar Organization
Cloudflare, Inc.
WHOIS Privacy Status
Public Registration Data
Registry Status Codes
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Delegated Authoritative Nameservers
ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
Registration Lifecycle
Registered: 2009 → Expires: 2033
Nameservers (NS)
ns3.cloudflare.comns4.cloudflare.comns5.cloudflare.comns6.cloudflare.comns7.cloudflare.com
Domain registered 18+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Cloudflare, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2

Email Security & Deliverability

SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.

Protected
SPF Record
v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all
DMARC Policy Mode
Policy: REJECT
DMARC Raw Record
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
DKIM Selectors Detected
s1
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (s1)
+3

Threat Intelligence & Blocklists

Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.

Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
Root Domain Label
cloudflare
Top-Level Domain (TLD)
.com (Standard TLD)
Punycode Obfuscation
No (Standard ASCII)
Homoglyph / Lookalike Script
No mixed scripts
Brand Match Analysis
No recognized brand impersonation
Typosquatting Risk
Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8

Technology Stack & Metadata

Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.

Detected
Detected Technologies by Category
framework
Astro
js
Svelte
css
Tailwind CSS
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
HTML Title
Cloudflare: Build for the agent era
Meta Description
Welcome to Cloudflare - Powering the next generation of applications
Document Language
en
Character Encoding
UTF-8
Viewport Setting
width=device-width, initial-scale=1.0, viewport-fit=cover
Generator Software
Astro v6.3.7
6 technologies detected
Astro, Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare
Built on a modern framework
+3
Mobile viewport configured
+2

Page Performance & Compression

Server response time, content payload size, Brotli/Gzip compression, and caching rules.

90ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
HTTP Response Time
90 ms
Payload Body Size
1303.7 KB
Compression Status
Uncompressed
Cache Directives
max-age=10
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
Response is cache-friendly
max-age=10
+2

AI Content Safety & Red Flags

High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.

Safe
AI Content Evaluation

94/100 — trusted. Long-established domain (17.7 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 18+ years ago; no impersonation patterns detected; not listed on URLhaus malware blocklist. Minor issues: no privacy policy found; no terms of service found.

Payment Red Flags
None (No suspicious payment requests)
High-Pressure Language
None (No artificial urgency detected)
Disposable Domain Risk
No (Established infrastructure)
Text Scanned Depth
3,335 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6

Server & Hosting Infrastructure

Primary IP address, web server software, CDN edge network, and redirect hop chain.

cloudflare
Primary Web Server
cloudflare
CDN / Cloud Provider
Cloudflare
Primary IP Address
104.16.133.229
HTTP Status Code
200 OK
Final Landing Destination
https://www.cloudflare.com/
Redirect Hop Count
1 hop
Redirect Hop Chain
  1. 1.https://cloudflare.com/ → https://www.cloudflare.com/
Site responded with 200
Final URL: https://www.cloudflare.com/. Response time 90ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (90ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4

SSL / TLS Certificate

Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.

Secure
Certificate Authority (Issuer)
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - G2
Subject Common Name (CN)
ssl2081.cloudflare.com
Validity Period
0 days remaining (Expires: 2015-10-11T19:11:16)
Subject Alternative Names (SANs)
25 domains protected
Certificates Logged (CT)
4978 certs recorded
Subject Alternative Names (Sample)
ssl2081.cloudflare.comssl7305.cloudflare.comssl7528.cloudflare.comssl6872.cloudflare.comssl2498.cloudflare.comssl7228.cloudflare.comssl4387.cloudflare.comssl7192.cloudflare.comssl2055.cloudflare.comssl6611.cloudflare.comssl6659.cloudflare.comssl7606.cloudflare.comssl2284.cloudflare.comssl2044.cloudflare.comssl7478.cloudflare.comssl7482.cloudflare.comssl6908.cloudflare.comssl7517.cloudflare.comssl7521.cloudflare.comssl7471.cloudflare.comssl7390.cloudflare.comssl7493.cloudflare.comssl7526.cloudflare.comssl7532.cloudflare.comssl7549.cloudflare.com+5 more
Valid SSL / TLS certificate active
Issued by C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - G2, valid for 0 remaining days.
+10
Certificate expires soon (0 days)
-4

Content & Transparency Policies

Linked privacy policy, terms of service, about page, social channels, and published contacts.

Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageFound
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
Verified Social Channels
Published Phone Numbers
0 0 341 156, 275.125 68.25, 242.999 148.76, 307.33 119.813, 281.059 112.601, 268.195 71.0866
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
Contact page linked from home page
+5
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
3 social profile(s) linked
twitter, linkedin, github
+3
Phone number published
+2

Robots.txt & Sitemap Discoverability

Search engine crawler directives, indexability, and declared XML sitemaps.

Present
Robots.txt Directives
Present & Configured
Sitemaps Declared
https://www.cloudflare.com/sitemap.xml
Disallow Rules Count
0 rules
View Raw robots.txt
# Robots.txt for www.cloudflare.com

User-agent: *
Allow: /

# Sitemap
Sitemap: https://www.cloudflare.com/sitemap.xml

# AI/LLM friendly content
# See https://llmstxt.org for the llms.txt specification
# llms.txt provides curated content for AI assistants and LLMs

# Allow AI crawlers to access markdown versions of pages
User-agent: GPTBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: Google-Extended
Allow: /

User-agent: Anthropic-AI
Allow: /

User-agent: Claude-Web
Allow: /

User-agent: CCBot
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: Cohere-ai
Allow: /

# Content Signals — declare AI content usage preferences
# See https://contentsignals.org/ and https://datatracker.ietf.org/doc/draft-romm-aipref-contentsignals/
Content-Signal: ai-train=yes, search=yes, ai-input=yes

# AI-friendly content locations
# - /llms.txt - Curated overview for AI/LLMs (markdown)
# - /llms-full.txt - Full expanded content for larger context windows
# - /*.md - Markdown versions of all pages (append .md to any URL)
# - /.well-known/agents.json - Agent discovery and capabilities
robots.txt published
+2
sitemap.xml available
+2

Export & Share Intelligence

Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.

Scan Engine Performance

Automated multi-signal inspection pipeline

v5.1.0 Engine
Signals Analyzed
43
This scan
Sources Checked
19
Live security feeds
Scan Duration
3.03s
Full live scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk

User reviews of cloudflare.com

Used cloudflare.com? Share your experience to help others. Plain text only — links are not allowed.

(optional)
0/1000 · min 15 characters

No reviews yet. Be the first to share your experience.