Multi-CDNs/WAFs Detector by FlopperPika4789

Multi-CDNs/WAFs Detector identifies the CDN, WAF, and bot-management infrastructure behind any domain — locally, in your browser, with no external telemetry.

Core detection
- 24 providers: Cloudflare, Akamai, Fastly, CloudFront, Azure Front Door, Google, Imperva, Sucuri, DataDome, PerimeterX, F5 Distributed Cloud, Vercel, Netlify, Fly.io, Render, Railway, BunnyCDN, StackPath, KeyCDN, Gcore, Tencent EdgeOne, Alibaba Cloud CDN, ArvanCloud, VNCDN
- Multi-signal scoring: DNS (CNAME/NS/MX/TXT/HTTPS records), cookies, response headers, IP-range matching, PTR/RDAP cross-verification, and Certificate Transparency lookups — not just a single header guess
- Layer-order inference (who sits in front of whom), origin-IP-leak detection, DNS-provider fingerprinting, SPF/DMARC email-infrastructure detection, and anycast divergence checks across multiple DNS resolvers

Built for depth, not just a yes/no badge
- Confidence breakdown per provider, with a staleness warning when a signature hasn't been reviewed recently
- Scan diffing — see exactly what changed since your last scan of the same domain
- Batch scanning, side-by-side domain comparison, and a full infrastructure timeline
- Distributed reachability probing from ~12 global locations (via check-host.net)
- Optional Core Web Vitals capture, third-party script attribution, and CVE/threat-intel lookups (Shodan/Censys, bring your own key)
- Export to JSON, CSV, Markdown, or a printable report; share a compact scan fingerprint with a teammate

Privacy
No telemetry by default. Crowd-sourced signature reporting is strictly opt-in and requires you to configure your own backend endpoint — nothing is sent anywhere unless you turn it on yourself.

Built for developers, security researchers, and anyone reverse-engineering how a site's infrastructure is put together.