B
86/100
cloudflare.com
Moderate concentration — DNS and web on a single anycast operator.
NS 5
web 4
MX 4
CDN yes · Cloudflare
DNSSEC yes
Network dependency map
each block is one resolved endpoint, coloured by Autonomous SystemDNS
Web
Mail
- AS13335 CLOUDFLARENET - Cloudflare, Inc.×28
Findings
3
medium
network
DNS and web on a single anycast operator
Both nameservers and web origin announce from AS13335 (CLOUDFLARENET - Cloudflare, Inc.). The anycast network cushions localized failures, but the operator remains a single dependency — a global control-plane incident affects everything at once.
24 endpoints
- ns3.cloudflare.com → 162.159.0.33 · AS13335 Cloudflare · US
- ns3.cloudflare.com → 162.159.7.226 · AS13335 Cloudflare · US
- ns3.cloudflare.com → 2400:cb00:2049:1::a29f:21 · AS13335 Cloudflare · US
- ns3.cloudflare.com → 2400:cb00:2049:1::a29f:7e2 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 162.159.1.33 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 162.159.8.55 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 2400:cb00:2049:1::a29f:121 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 2400:cb00:2049:1::a29f:837 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 162.159.2.9 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 162.159.9.55 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 2400:cb00:2049:1::a29f:209 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 2400:cb00:2049:1::a29f:937 · AS13335 Cloudflare · US
- ns6.cloudflare.com → 162.159.3.11 · AS13335 Cloudflare · US
- ns6.cloudflare.com → 162.159.5.6 · AS13335 Cloudflare · US
- ns6.cloudflare.com → 2400:cb00:2049:1::a29f:30b · AS13335 Cloudflare · US
- ns6.cloudflare.com → 2400:cb00:2049:1::a29f:506 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 162.159.4.8 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 162.159.6.6 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 2400:cb00:2049:1::a29f:408 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 2400:cb00:2049:1::a29f:606 · AS13335 Cloudflare · US
- cloudflare.com → 104.16.132.229 · AS13335 Cloudflare · US
- cloudflare.com → 104.16.133.229 · AS13335 Cloudflare · US
- cloudflare.com → 2606:4700::6810:84e5 · AS13335 Cloudflare · US
- cloudflare.com → 2606:4700::6810:85e5 · AS13335 Cloudflare · US
For high-availability domains, host authoritative DNS with a second, independent operator.
low
dns
Nameservers on a single anycast provider
All nameservers are Cloudflare, a globally anycast operator — resilient to localized failures, but still a single operator-level dependency (control plane, account, global outage).
20 endpoints
- ns3.cloudflare.com → 162.159.0.33 · AS13335 Cloudflare · US
- ns3.cloudflare.com → 162.159.7.226 · AS13335 Cloudflare · US
- ns3.cloudflare.com → 2400:cb00:2049:1::a29f:21 · AS13335 Cloudflare · US
- ns3.cloudflare.com → 2400:cb00:2049:1::a29f:7e2 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 162.159.1.33 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 162.159.8.55 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 2400:cb00:2049:1::a29f:121 · AS13335 Cloudflare · US
- ns4.cloudflare.com → 2400:cb00:2049:1::a29f:837 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 162.159.2.9 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 162.159.9.55 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 2400:cb00:2049:1::a29f:209 · AS13335 Cloudflare · US
- ns5.cloudflare.com → 2400:cb00:2049:1::a29f:937 · AS13335 Cloudflare · US
- ns6.cloudflare.com → 162.159.3.11 · AS13335 Cloudflare · US
- ns6.cloudflare.com → 162.159.5.6 · AS13335 Cloudflare · US
- ns6.cloudflare.com → 2400:cb00:2049:1::a29f:30b · AS13335 Cloudflare · US
- ns6.cloudflare.com → 2400:cb00:2049:1::a29f:506 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 162.159.4.8 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 162.159.6.6 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 2400:cb00:2049:1::a29f:408 · AS13335 Cloudflare · US
- ns7.cloudflare.com → 2400:cb00:2049:1::a29f:606 · AS13335 Cloudflare · US
Acceptable for most; for tier-1 domains add a second anycast provider for operator independence.
info
web
Web served via CDN (Cloudflare)
The web tier resolves into a CDN/anycast network, which absorbs traffic across many PoPs and shields the origin.
4 endpoints
- cloudflare.com → 104.16.132.229 · AS13335 Cloudflare · US
- cloudflare.com → 104.16.133.229 · AS13335 Cloudflare · US
- cloudflare.com → 2606:4700::6810:84e5 · AS13335 Cloudflare · US
- cloudflare.com → 2606:4700::6810:85e5 · AS13335 Cloudflare · US
DNS records
| Nameservers | ns3.cloudflare.com ns4.cloudflare.com ns5.cloudflare.com ns6.cloudflare.com ns7.cloudflare.com |
|---|---|
| A | 104.16.132.229 104.16.133.229 |
| AAAA | 2606:4700::6810:84e5 2606:4700::6810:85e5 |
| MX | 5 mxa-canary.global.inbound.cf-emailsecurity.net 5 mxb-canary.global.inbound.cf-emailsecurity.net 10 mxa.global.inbound.cf-emailsecurity.net 10 mxb.global.inbound.cf-emailsecurity.net |
| SOA | ns3.cloudflare.com. dns.cloudflare.com. 2410308532 10000 2400 604800 300 |
| CAA | 11 record(s) present |
| DNSSEC | signed (DS present) |
| TXT | 28 record(s) |
Scan history
- B2026-08-01 00:57 UTC
- B2026-08-01 00:57 UTC
- B2026-08-01 00:57 UTC
- B2026-08-01 00:57 UTC
- B2026-08-01 00:53 UTC
- B2026-07-30 17:57 UTC
- B2026-07-30 17:57 UTC
- B2026-07-30 10:50 UTC
Machine-readable: /api/scan?domain=cloudflare.com