--- title: "Download list of all Cloudflare Bot Management sites" description: "Every website running Cloudflare Bot Management, with domain, DNS, WHOIS, IP address, hosting country and global rank on each row. One file, rebuilt daily." url: https://webatla.com/technology/cloudflare-bot-management --- [Home](https://webatla.com/) › [Technologies](https://webatla.com/technology) › [Security](https://webatla.com/technology?category=Security) › Cloudflare Bot Management ![Cloudflare Bot Management logo](https://webatla.com/assets/tech-logos/cloudflare-bot-management.png) # Download websites that use Cloudflare Bot Management 13,016,546 live sites using Cloudflare Bot Management right now Security · by Cloudflare Inc. · since 2019 · Proprietary 13.0M sites, Dataset updated · 2026-10-27 Categories [Security](https://webatla.com/technology?category=Security) [🔒 Get the list](https://webatla.com/technology/cloudflare-bot-management#preview) Requires a dataset purchase [About Cloudflare Bot Management](https://webatla.com/technology/cloudflare-bot-management#overview) [Database preview](https://webatla.com/technology/cloudflare-bot-management#preview) [By country](https://webatla.com/technology/cloudflare-bot-management#by-country) [By TLD](https://webatla.com/technology/cloudflare-bot-management#by-tld) [Download](https://webatla.com/technology/cloudflare-bot-management#download) All figures as of Oct 27, 2026 All figures here come from one snapshot of the webatla database, taken on this date (UTC). We usually refresh it every day. 13,016,546, Sites detected 4.1%, Of all websites ## Preview Cloudflare Bot Management site datasets Cloudflare Bot Management detection is a value inside the **Technologies** column. Two datasets carry it. **Technologies · €159 / month · 13,016,546 rows · 14 columns · webatla-technologies-cloudflare-bot-management-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | w3.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 104.18.22.19 | [US](https://webatla.com/country/us) | {"github":["https://github.com/w3c"]} | 2026-09-21 | HSTS, HTTP/3, Favicon, Cloudflare, Open Graph, Google Site Verification, Cloudflare Bot Management | 0.000440483 | 20,748,018 | 1994-07-06 | 2029-07-05 | | ietf.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 104.16.44.99 | [US](https://webatla.com/country/us) | {…} | 2026-10-04 | Django, HTTP/3, Python, Wagtail, Cloudflare, Open Graph, Google Site Verification, Cloudflare Bot Management | 0.000126314 | 20,280,316 | 1995-03-11 | 2031-03-12 | | sourceforge.net | [net](https://webatla.com/tld/net) | [net](https://webatla.com/tld/net) | ICANN | HTTP 200 | 104.18.12.149 | [US](https://webatla.com/country/us) | {…} | 2026-10-25 | Google Analytics GA4 G-1H226E4E4L , RSS, HSTS, HTTP/3, Favicon, YouTube, SparkPost, Cloudflare, Google Site Verification, Cloudflare Bot Management | 0.0000868166 | 19,526,540 | 1999-08-08 | 2027-08-08 | | linkedin.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 130.211.32.14 | [US](https://webatla.com/country/us) | {…} | 2026-10-22 | HSTS, Java, Miro, Azure, HTTP/3, Favicon, DigiCert, DocuSign, hreflang, Atlassian | 0.00398415 | 24,984,864 | 2002-11-02 | 2026-11-02 | | x.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 162.159.140.229 | [US](https://webatla.com/country/us) | {…} | 2026-09-23 | PWA, HSTS, Figma, Plaid, Slack, HTTP/2, Notion, Sentry, Stripe, Favicon | 0.0014829 | 21,801,720 | 1993-04-02 | 2034-10-20 | **All data · €599 / month · 13,016,546 rows · 23 columns · webatla-all-data-cloudflare-bot-management-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | w3.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 104.18.22.19 | [US](https://webatla.com/country/us) | {"github":["https://github.com/w3c"]} | 2026-09-21 | HSTS, HTTP/3, Favicon, Cloudflare, Open Graph, Google Site Verification, Cloudflare Bot Management | 2026-10-18 | TRUE | {…} | 0.000440483 | 20,748,018 | 2025-06-23 | RDAP | 1994-07-06 | 2029-07-05 | 2025-06-23 | Gandi SAS | {…} | Domain is active | | ietf.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 104.16.44.99 | [US](https://webatla.com/country/us) | {…} | 2026-10-04 | Django, HTTP/3, Python, Wagtail, Cloudflare, Open Graph, Google Site Verification, Cloudflare Bot Management | 2026-10-18 | TRUE | {…} | 0.000126314 | 20,280,316 | 2026-03-11 | RDAP | 1995-03-11 | 2031-03-12 | 2026-03-11 | Cloudflare, Inc. | {…} | Domain is active | | sourceforge.net | [net](https://webatla.com/tld/net) | [net](https://webatla.com/tld/net) | ICANN | HTTP 200 | 104.18.12.149 | [US](https://webatla.com/country/us) | {…} | 2026-10-25 | Google Analytics GA4 G-1H226E4E4L , RSS, HSTS, HTTP/3, Favicon, YouTube, SparkPost, Cloudflare, Google Site Verification, Cloudflare Bot Management | 2026-10-26 | TRUE | {…} | 0.0000868166 | 19,526,540 | 2025-07-07 | RDAP | 1999-08-08 | 2027-08-08 | 2025-07-06 | GoDaddy.com, LLC | {…} | Domain is active | | linkedin.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 130.211.32.14 | [US](https://webatla.com/country/us) | {…} | 2026-10-22 | HSTS, Java, Miro, Azure, HTTP/3, Favicon, DigiCert, DocuSign, hreflang, Atlassian | 2026-10-24 | TRUE | {…} | 0.00398415 | 24,984,864 | 2025-10-04 | RDAP | 2002-11-02 | 2026-11-02 | 2025-10-03 | MarkMonitor Inc. | {…} | Domain is active | | x.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 162.159.140.229 | [US](https://webatla.com/country/us) | {…} | 2026-09-23 | PWA, HSTS, Figma, Plaid, Slack, HTTP/2, Notion, Sentry, Stripe, Favicon | 2026-10-19 | TRUE | {…} | 0.0014829 | 21,801,720 | 2025-06-23 | RDAP | 1993-04-02 | 2034-10-20 | 2025-06-23 | GoDaddy.com, LLC | {…} | Domain is active | [↓ Download preview (20 rows, free)](https://webatla.com/api/v1/sample/technology/cloudflare-bot-management?dataset=technologies) [Buy Technologies · €159 / month](https://webatla.com/account/checkout?dataset=technologies) ## Cloudflare Bot Management sites by country | Country | Sites | Share | | --- | --- | --- | | 🇺🇸 [United States](https://webatla.com/country/us) | 10,891,203 | 85.7% | | 🇦🇪 [United Arab Emirates](https://webatla.com/country/ae) | 1,034,062 | 8.1% | | 🇦🇺 [Australia](https://webatla.com/country/au) | 383,332 | 3.0% | | 🇧🇷 [Brazil](https://webatla.com/country/br) | 123,396 | 1.0% | | 🇩🇪 [Germany](https://webatla.com/country/de) | 45,970 | 0.4% | ## Cloudflare Bot Management sites by TLD | TLD | Sites | Share | | --- | --- | --- | | [.com](https://webatla.com/tld/com) | 8,439,830 | 64.8% | | [.org](https://webatla.com/tld/org) | 598,841 | 4.6% | | [.uk](https://webatla.com/tld/uk) | 418,790 | 3.2% | | [.net](https://webatla.com/tld/net) | 381,335 | 2.9% | | [.de](https://webatla.com/tld/de) | 311,783 | 2.4% | ## The Cloudflare Bot Management dataset Every site we've detected as running Cloudflare Bot Management, with version, hosting, country, TLD and traffic rank. ### Cloudflare Bot Management lives inside 2 datasets Cloudflare Bot Management detection is part of **Technologies** (€159/mo) and **All data** (€599/mo). Buy either to filter the full 13,016,546-site list, or grab a free preview first. [See datasets](https://webatla.com/pricing) [↓ Download free preview (20 rows)](https://webatla.com/api/v1/sample/technology/cloudflare-bot-management?dataset=technologies) ## About Cloudflare Bot Management ### At a glance - **Vendor:** Cloudflare Inc. - **Website:** cloudflare.com ↗ - **License:** Proprietary - **First release:** 2019-01-01 A control designed to be inconspicuous is a strange thing to try to count. Requests are scored at the edge before they ever reach the origin server, so what comes back in an ordinary response is indirect: a scoring cookie, a challenge path, a header added on the way out. Recording Cloudflare Bot Management means reading those leftovers rather than reading a tag somebody pasted into a template. Presence therefore carries an unusual amount of commercial information for a security control. Bot defence of this class is not a free tier feature and not something a developer enables while nobody is looking. Somebody signed a contract, and in most organisations the same conversation covered a firewall, rate limiting and a support agreement. A domain that shows the product is a domain with a security budget, an owner who has been scraped or credential stuffed at least once, and a procurement process reaching beyond the hosting invoice. As of October 2026 the dataset carries 13,016,546 sites with the product in place, 10,891,203 of them in United States, and .com is heavily represented across the domains. Concentration in one country and one suffix says less about where automated traffic is a problem than about where Cloudflare Inc. sells and where large commercial properties register. Ticketing, travel, retail and financial services cluster in the same places for the same reason. The product has been on sale since 2019 and it is Proprietary, which matters more here than the license field usually does. There is no self hosted equivalent to install and no open fork to adopt, so a detection is a statement about a supplier relationship rather than about an engineering choice a team could reproduce internally. Sites lose the flag when they leave the vendor, which makes the column a workable proxy for enterprise account movement. Detection has a floor worth stating before anyone builds a forecast on the number. A well tuned deployment that never challenges ordinary browser traffic can be almost silent, and our crawler is a polite client that is often waved through. We record the product where signals specific to it appear in the response we receive, and we do not infer it from the mere fact that a site sits behind Cloudflare Inc., because the ordinary delivery network and the bot product are separate purchases. The consequence is undercount rather than false positives. Sites on the list are sites where the evidence was actually present. Two audiences use the population in opposite directions. Security vendors read it as a competitive map, since a domain already paying for commercial bot defence has conceded that the problem is real and has a renewal date attached. Data, pricing and integration teams read it as a constraint map, because a property that scores automated traffic is a property where partner access, price monitoring and any form of collection need to be arranged rather than assumed. Compliance and procurement teams use it a third way, checking which suppliers in a portfolio run controls comparable to their own. A lookup service answers one hostname and returns a yes or a no. The questions that justify a dataset are shaped differently: which segment of an industry has adopted edge bot defence, how far the share moved over a year, which hosting bases and registrars are overrepresented, and what else runs on the sites that adopted it. The download answers those in one pass, with country, suffix, Security peers and the rest of each site's detected stack sitting on the same row as the flag itself. ## Frequently asked questions How many websites use Cloudflare Bot Management? webatla detects Cloudflare Bot Management on 13.0M websites, refreshed daily, each with its domain, DNS, WHOIS, IP, country and ranking. Can I download the list of websites using Cloudflare Bot Management? Yes, as structured JSONL. Grab a free sample first. What's included for each site, and how fresh is it? Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic, re-detected and re-exported daily. How do I find the websites using Cloudflare Bot Management? Buy the technology dataset, then download the complete list of domains we detect using Cloudflare Bot Management, re-exported every day. What else is in the Cloudflare Bot Management technology data? Each row places Cloudflare Bot Management next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking. Can I download just the sites using Cloudflare Bot Management, or the whole database? Both. Every site running Cloudflare Bot Management comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export. How do I download the list of websites using Cloudflare Bot Management? Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running Cloudflare Bot Management as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank. ## Get the full list of websites using Cloudflare Bot Management Pick the dataset that covers what you need. Each one includes Cloudflare Bot Management and downloads as JSONL, rebuilt daily. Technologies, 14 columns Full website tech stack per site: CMS, payments, analytics, frameworks. €159 / mo [Buy and download](https://webatla.com/account/checkout?dataset=technologies) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=technologies) All data, 23 columns Everything we have, in a single package. The full webatla universe. €599 / mo [Buy and download](https://webatla.com/account/checkout?dataset=all-data) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=all-data) Want to compare every dataset side by side? [Visit the pricing page](https://webatla.com/pricing) ## Related technologies [![HSTS logo](https://webatla.com/assets/tech-logos/hsts.png) HSTS Security · 53.6M sites](https://webatla.com/technology/hsts) [![reCAPTCHA logo](https://webatla.com/assets/tech-logos/recaptcha.png) reCAPTCHA Security · 4.1M sites](https://webatla.com/technology/recaptcha) [![DDoS-Guard logo](https://webatla.com/assets/tech-logos/ddos-guard.png) DDoS-Guard Security · 685K sites](https://webatla.com/technology/ddos-guard) [![hCaptcha logo](https://webatla.com/assets/tech-logos/hcaptcha.png) hCaptcha Security · 287K sites](https://webatla.com/technology/hcaptcha)