Cloudflare
Cloudflare proxies a large share of the public internet through its CDN, WAF, and DDoS-mitigation layer. Many of the responses captured below are Cloudflare-issued challenge or block pages rather than upstream content, which is itself a useful signal about how widely the platform is deployed.
Recent scans where Cloudflare was detected
How ScanMalware detects Cloudflare
Each public scan on ScanMalware.com is analysed for the technologies that make up the site's stack — web servers, frameworks, CDNs, analytics, and security middleware. When Cloudflare is observed (via response headers, fingerprintable URLs, JavaScript globals, or known asset patterns), the scan is tagged accordingly. This page lists scans where Cloudflare was identified as part of the underlying stack.
Want to dig deeper? You can pivot from any scan into related signals — JARM TLS fingerprints, ASN ownership, BGP routing, or co-resident technologies — to map how Cloudflare is being used across the public web.