Is cloudflare.com legit?
This website is highly trusted, exhibiting strong security practices and a well-established online presence. The minor issues are common and do not detract from its overall reliability.
Hosting & Domains average: 77/100 · based on 38 sites
Checked: April 21, 2026 at 6:48 PM UTC
Is cloudflare.com a scam? Here's what we found.
The site has a very strong security posture, utilizing the latest TLS 1.3, a valid certificate from a reputable issuer, and is not flagged by Google Web Risk. The inability to check Certificate Transparency is a minor informational gap.
Cloudflare.com boasts a significant domain age of over 17 years and a top Tranco rank, indicating a well-established and highly recognized entity. The transparency around its WHOIS information further reinforces its identity.
The extensive domain age and extremely high Tranco rank are strong indicators of a highly reputable and well-known entity. The absence of a Trustpilot profile is not unusual for a company of this nature and does not detract from its overall standing.
The site provides clear contact information, has custom branding, and maintains a strong social media presence across multiple platforms, demonstrating a high degree of transparency and engagement with its audience.
The presence of both a privacy policy and terms of service pages indicates a commitment to legal and user data compliance, which is expected for a company of this scale.
The robust infrastructure includes DNSSEC, DMARC for email authentication, multiple name servers, and fast page load times. The missing sitemap is a minor organizational detail that does not impact core functionality.
Signals Detected
This is one of the most visited websites globally
Site has structured data markup
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2009-02-17T22:07:54Z (17 years, 5 months ago)
Registered through Cloudflare, Inc.
Expires in 2494 days
DNSSEC status from WHOIS
crt.sh returned status 429
Valid certificate, expires in 50 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Resolves to: 2606:4700::6810:84e5, 2606:4700::6810:85e5, 104.16.133.229, 104.16.132.229
Mail servers: mxb-canary.global.inbound.cf-emailsecurity.net., mxa-canary.global.inbound.cf-emailsecurity.net., mxa.global.inbound.cf-emailsecurity.net., mxb.global.inbound.cf-emailsecurity.net.
Domain has DMARC email authentication configured
DNS providers: ns3.cloudflare.com., ns4.cloudflare.com., ns5.cloudflare.com., ns6.cloudflare.com., ns7.cloudflare.com.
Site has custom branding and social media metadata
robots.txt has 159 directives and references a sitemap
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.