Is this site behind Cloudflare?
The most-deployed reverse proxy on the web. Classifies clients via TLS fingerprinting, JS challenges, Turnstile, and managed rules.
Free diagnostic • Confidence scoring • Signal-by-signal breakdown • Recommended client configuration
Verification keeps this tool free from abuse. For diagnostic and developer use only — run checks on sites you are authorised to access.
What is Cloudflare?
Cloudflare is a global CDN and security platform sitting in front of an estimated 20%+ of the web. Its bot-management layer combines TLS / JA3 / JA4 fingerprinting, browser challenges (Turnstile, "I am Human"), Under Attack Mode, and machine-learning client-classification scores.
Read the full Cloudflare Bot Management glossary entry
How Cloudflare protects sites
- ›Browser integrity check + JavaScript challenge ("Checking your browser…")
- ›Cloudflare Turnstile — invisible challenge replacing classic CAPTCHA
- ›Under Attack Mode (5s interstitial)
- ›Managed Rules and rate-limiting by IP / ASN
- ›TLS fingerprint (JA3/JA4) matching against known HTTP-client libraries
- ›WAF rules that inspect headers and request shape
Detection signals we look for
- ✓
server: cloudflareresponse header - ✓
cf-rayresponse header (Ray ID) - ✓
cf-cache-statusheader - ✓
__cf_bmandcf_clearancecookies - ✓Challenge page containing
/cdn-cgi/challenge-platform/
Recommended Scrappey client configuration
For authorised access only — your own properties, contractually permitted scraping, QA, monitoring, accessibility audits, and similar use cases. Always respect the site's terms of service and applicable law.
- →Run a full browser engine rather than a bare HTTP client — a complete TLS stack and JS runtime keep the handshake consistent with a normal browser.
- →Persist
cf_clearanceacross requests by reusing the same Scrappey session, so client state isn't re-negotiated on every call. - →Prefer residential or mobile egress for traffic that should resemble a regular visitor — datacenter ranges tend to carry lower reputation scores.
- →Keep the proxy region aligned with the site's primary audience so request geo stays consistent.
- →Reuse one session for the lifetime of the issued tokens, and respect the site's terms of service.
Create a free account to run the configuration above — free demo trial, no card required.
Cloudflare FAQ
How do I know if a site uses Cloudflare?
Paste the URL above — we check for the cf-ray and server: cloudflare headers plus characteristic challenge HTML. The check takes about one second.
Why does my Python requests or curl script get blocked on Cloudflare sites?
Cloudflare's managed challenge fingerprints the TLS handshake. requests and curl produce JA3 hashes that are instantly classified as non-browser HTTP clients, so the WAF replies with a 403 or a challenge page. For authorised access, run a real browser or a TLS-mimicking library like curl_cffi.
What is cf_clearance?
A cookie issued after a successful challenge clearance. It is bound to your IP and User-Agent — moving the cookie to another machine invalidates it. Scrappey sessions hold it for you.
Related concepts
Deeper reading on the techniques and signals that surround Cloudflare.
Concept map
How anti-bot protection fits together
Hover a vendor or technique to see the connections. Click any node to read the full glossary entry. The lines show which detection techniques each vendor leans on.
Detect other anti-bot vendors
Integrations
n8n
Automate workflows visually. Streamline data collection processes.
n8n Template
Pre-built template for modern websites. Simplifies Scrappey integration.
RapidAPI
Access via API marketplace. Easy integration with comprehensive docs.
Apify
Scalable actor-based automation. Reliable browser rendering.
MCP Server
AI-powered browser automation. Intelligent session management.
Scrappey CLI
Scrape from your terminal. One command, pipeable output, CI-ready.
Claude Code Skill
Portable skill for Claude Code + Codex. Browser-backed data access on demand.
LangChain
LangChain connector — clean web data for any chain or agent.
LlamaIndex
LlamaIndex reader — load modern web pages straight into RAG.
Zapier
Connect with 7,000+ apps. Automate workflows easily.
Make
Visual workflow automation. Connect with 1,000+ apps easily.
Start building with Scrappey
Try it free. No subscription, no credit card, instant setup — your trial is waiting.