Multi-CDNs/WAFs Detector

Multi-CDN/WAF Detector identifies the CDN, WAF, and bot-management infrastructure behind any domain, locally in your browser.

Cloudflare, Akamai, Fastly, CloudFront, Azure Front Door, Google, Imperva, Sucuri, DataDome, PerimeterX, F5 Distributed Cloud, Vercel, Netlify, Fly.io, Render, Railway, Deno Deploy, BunnyCDN, StackPath, KeyCDN, Gcore, Tencent EdgeOne, Alibaba Cloud CDN, ArvanCloud, VNCDN.

Multi-signal scoring — not just a single header guess:

• DNS (CNAME/NS/MX/TXT/HTTPS records) and domain-suffix matching (works even when a provider's own hostname has no separate CNAME)
• Response headers, cookies, and IP-range matching against each provider's officially published ranges, refreshed daily
• PTR/RDAP cross-verification and Certificate Transparency lookups
• Layer-order inference (who sits in front of whom), origin-IP-leak detection, DNS-provider fingerprinting, SPF/DMARC checks, and anycast divergence checks across multiple resolvers

• Confidence breakdown per provider, with a staleness warning when a signature hasn't been reviewed recently
• Scan diffing — see exactly what changed since your last scan of the same domain, saved as a full infrastructure timeline
• Batch scanning and side-by-side domain comparison
• Distributed reachability probing from ~12 global locations (via check-host.net)
• Passive ambient detection — an optional badge that shows the CDN/WAF count for the site you're currently browsing, without you having to open the popup and scan
• A watchlist with scheduled auto-rescans, so you find out when a domain's infrastructure changes instead of having to check by hand
• Optional Shodan/Censys threat-intel lookups for a resolved IP (bring your own API key — off by default)

When a scan turns up response headers no provider recognizes yet, each detected provider's detail view surfaces them as one-click "report this?" buttons — helping catch new provider signatures as CDNs roll out infrastructure changes. On by default, and fully disclosed:

• Sends a provider ID, the header name (or a short note you write), and the domain it was seen on — never your IP, and nothing beyond that.
• Domain is included deliberately: it's what lets a report be checked against reports from other domains, so a header that only ever shows up on one site (probably that site's own header, not a real provider signal) can be told apart from one that's genuinely corroborated across many unrelated domains.
• Fully visible and controllable in Settings — turn it off, or point it at your own self-hosted collector, any time. No account or sign-up required either way.

All scanning and scoring happens locally in your browser. The only network calls this extension makes are: (1) DNS-over-HTTPS lookups and direct HTTP requests to the domain you choose to scan, (2) daily refreshes of official public IP ranges from each provider, and (3) the opt-out crowd-report submissions described above. No analytics, no ads, no tracking of your browsing beyond what you explicitly scan.

JSON/CSV/Markdown export, dark and light themes, a side-panel view, keyboard shortcuts (Ctrl+Shift+S popup, Ctrl+Shift+D side panel, Ctrl+Shift+V scan from clipboard), and settings synced across your Firefox profiles.

Source: https://github.com/VuJohn123/CDNs_WAFs_Detector