Cloudflare Turnstile
Cloudflare Turnstile is a CAPTCHA alternative that verifies visitors are human without a puzzle, often used on login and signup forms. It is detected from the Turnstile widget script and challenge iframe.
Turnstile on a form indicates anti-automation protection. On a credential-collecting page it can also lend a phishing site a veneer of legitimacy, so it should be read alongside the rest of the scan.
Commonly deployed alongside Cloudflare Turnstile
Of the 13,595 public scans where Cloudflare Turnstile was detected, these are the technologies most often present on the same site. The share is the percentage of Cloudflare Turnstile sites that also ran each one.
| Technology | Category | Share of Cloudflare Turnstile sites |
|---|---|---|
| Cloudflare | wappalyzer | 100% |
| X-UA-Compatible | miscellaneous | 71.26% |
| Cloudflare Bot Management | wappalyzer | 69.76% |
| reCAPTCHA | wappalyzer | 49.13% |
| HTTP/3 | wappalyzer | 41.48% |
| HSTS | wappalyzer | 22.96% |
| Google Cloud | wappalyzer | 18.72% |
| Google Cloud CDN | wappalyzer | 18.66% |
| hCaptcha | wappalyzer | 15.56% |
| Open-Graph-Protocol | miscellaneous | 11.29% |
| jQuery | wappalyzer | 10% |
| Google Analytics | wappalyzer | 7.59% |
| JQuery | miscellaneous | 7.03% |
| Cloudflare Browser Insights | wappalyzer | 6.28% |
How ScanMalware detects Cloudflare Turnstile
Cloudflare Turnstile is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that Cloudflare Turnstile is present, but how it is being used. Open the full search interface for Cloudflare Turnstile →
Recent public scans featuring Cloudflare Turnstile
A rolling sample of recent public scans where Cloudflare Turnstile was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| https://m.insidertracking.com/company?ticker=MSTR | 2026-08-03 |
| Suspected Malware | Cloudflare http://sp5ct-purev-biz8-talek-horin.pages.dev/ | 2026-08-03 |
| Suspected Malware | Cloudflare https://sp4ct-vasel-biz8-drenox-polvar.pages.dev/ | 2026-08-03 |
| Suspected Malware | Cloudflare https://7ho-axyvwx-2pz8-rh894-l32n.pages.dev/ | 2026-08-03 |
| Suspected Malware | Cloudflare https://7iih-qvl4l-2xkii-hghk-jtgq.pages.dev/ | 2026-08-03 |
| Suspected Malware | Cloudflare http://7iih-qvl4l-2xkii-hghk-jtgq.pages.dev/ | 2026-08-03 |
| Suspected Malware | Cloudflare https://7n0-4p04-wgjxi-mfrde-im0dhe.pages.dev/ | 2026-08-03 |
| Suspected Malware | Cloudflare http://7n0-4p04-wgjxi-mfrde-im0dhe.pages.dev/ | 2026-08-03 |
Frequently asked questions about Cloudflare Turnstile
- Does using Cloudflare Turnstile mean a website is unsafe?
- No. Cloudflare Turnstile is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using Cloudflare Turnstile can be perfectly safe or actively malicious.
- How many sites using Cloudflare Turnstile has ScanMalware scanned?
- Cloudflare Turnstile has been detected in 13,595 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with Cloudflare Turnstile?
- Across scanned sites, Cloudflare Turnstile is most often seen alongside Cloudflare, X-UA-Compatible and Cloudflare Bot Management. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.