cloudflare.com

Observed 2026-07-14T00:54:10.276Z (12h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle (SPF sender)

Also usesZoomAtlassianFacebook/MetaGoogle Search ConsoleDockerStripeMiro

IPv6 · 14 subdomains · big_tech

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat cloudflare.com actually stands on - every host below is a signed observation

cloudflare.com

A / AAAA

104.16.133.229104.16.132.2292606:4700::6810:85e52606:4700::6810:84e5

Cloudflareserves the site

ns3.cloudflare.comns5.cloudflare.comns6.cloudflare.comns7.cloudflare.com+1 more

cloudflare.comanswers its DNS

mxb-canary.global.inbound.cf-emailsecurity.netmxa-canary.global.inbound.cf-emailsecurity.netmxb.global.inbound.cf-emailsecurity.netmxa.global.inbound.cf-emailsecurity.net

Google (SPF sender)receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.cloudflare.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time20 ms

DNS resolutionNOERROR

Redirect chain

https://www.cloudflare.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.16.133.229
104.16.132.229

AAAA 2

2606:4700::6810:85e5
2606:4700::6810:84e5

MX 4

5mxb-canary.global.inbound.cf-emailsecurity.net
5mxa-canary.global.inbound.cf-emailsecurity.net
10mxb.global.inbound.cf-emailsecurity.net
10mxa.global.inbound.cf-emailsecurity.net

TXT 28

_saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457
logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654
ZOOM_verify_7LFBvOO9SIigypFG2xRlMA
atlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xB
databank-domain-verification-hkehd2=fzgu4kmbZwMoW99zENgO4u8NL
_neqmkgaq1lq9it5s8qmetrhbnu121wb
drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f
facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo
canva-site-verification=oOyaVnHC-OiFoR1BPvetNA
v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all

NS 5

ns3.cloudflare.com
ns5.cloudflare.com
ns6.cloudflare.com
ns7.cloudflare.com
ns4.cloudflare.com

SOA 1

ns3.cloudflare.com dns.cloudflare.com

CAA 11

issue digicert.com; cansignhttpexchanges=yes
issuewild letsencrypt.org
issuewild comodoca.com
iodef mailto:tls-abuse@cloudflare.com
issue ssl.com
issuewild digicert.com; cansignhttpexchanges=yes
issuewild ssl.com
issue pki.goog; cansignhttpexchanges=yes
issue letsencrypt.org
issuewild pki.goog; cansignhttpexchanges=yes

TLS Certificates (0)

None.

Subdomains (14)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cloudflare.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/cloudflare.com">
  <img src="https://domaindrift.io/badge/cloudflare.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for cloudflare.com">
</a>

Ed25519 Receipt

Receipt ID: ee5ae5c3-8455-49be-b7dd-496977c53b08
Output Hash: f5e44628a8c8d701d183720cea4f622bfddf2f9583112c68e3ba87c53b2e5984
Signature: ed25519:c2f4d9255e3643c6a1960819c7dd93b9a59d85e0a41e692a9fdd6eb5da4801d994449e0c33d71e029244ae2d0df8d5f720dfad79bc3f5e793d37fe56d0df130d
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/cloudflare.com