networkutils.org

Home / Web Tools / CDN & WAF Detect

CDN & WAF Detect

Web Tools

Identify edge providers in front of a site.

Run this tool: the interactive CDN & WAF Detect loads here (requires JavaScript). Input: Domain — e.g. example.org.

Description

CDN & WAF Detect identifies the edge provider (CDN) and web application firewall in front of a site by analysing response headers, server signatures and resolved IP ownership.

Features

✓ CDN identification from headers and IP ownership
✓ WAF / security proxy detection
✓ Edge server hostname and IP reporting
✓ Hosting provider inference

How to Use

Enter a domain name (example.org) and run the tool. The probe fetches the site and analyses the headers and resolved addresses to identify the edge provider.

Input: Domain — e.g. example.org.

Understanding the Results

The output reports the detected CDN (Cloudflare, CloudFront, Fastly, Akamai…), any WAF in front, the edge server hostname and IP, and the inferred hosting provider. Use it to confirm a migration, to verify a site is behind the expected protection, or to research a competitor's infrastructure.

Common Use Cases & Examples

→ Confirm a site is behind the expected CDN and WAF.

→ Verify a CDN migration cutover completed.

→ Identify the hosting and edge provider behind a domain.

→ Check whether a competitor uses a CDN or WAF.

Frequently Asked Questions

How is the CDN detected?

The tool combines signals: CDN-specific response headers (e.g. cf-ray, x-amz-cf-id, x-served-by), the Server header, and the ASN/organisation that owns the resolved edge IPs. Multiple agreeing signals give a confident identification.

Can a site hide its CDN?

Partially. A site can strip CDN headers and proxy behind a custom hostname, but the resolved IP ownership usually still reveals the edge provider. Detection is heuristic, so a heavily customised setup may report "unknown" rather than a specific CDN.

What is the difference between a CDN and a WAF?

A CDN caches and delivers content from edge locations for performance. A WAF inspects requests and blocks malicious traffic (SQLi, XSS, bots). Many providers bundle both, and they often run on the same edge, which is why this tool reports them together.

About this tool

Maintained by
networkutils.org editorial team
Last updated
September 2026
Testing methodology
Web tools issue real HTTP/HTTPS requests from the NetworkUtils.org server using Node.js http/https, following redirects where appropriate, and report response headers, status codes, redirect chains and per-phase request timing.