Multi-CDNs/WAFs Detector by FlopperPika4789

Multi-CDN/WAF Detector identifies the CDN, WAF, and bot-management
infrastructure behind any domain, locally in your browser.


Cloudflare, Akamai, Fastly, CloudFront, Azure Front Door, Google, Imperva,
Sucuri, DataDome, PerimeterX, F5 Distributed Cloud, Vercel, Netlify,
Fly.io, Render, Railway, Deno Deploy, BunnyCDN, StackPath, KeyCDN,
Gcore, Tencent EdgeOne, Alibaba Cloud CDN, ArvanCloud, VNCDN.

Multi-signal scoring — not just a single header guess:
- DNS (CNAME/NS/MX/TXT/HTTPS records) and domain-suffix matching
(works even when a provider's own hostname has no separate CNAME)
- Response headers, cookies, and IP-range matching against each
provider's officially published ranges, refreshed daily
- PTR/RDAP cross-verification and Certificate Transparency lookups
- Layer-order inference (who sits in front of whom), origin-IP-leak
detection, DNS-provider fingerprinting, SPF/DMARC checks, and anycast
divergence checks across multiple resolvers

• Confidence breakdown per provider, with a staleness warning when a
  signature hasn't been reviewed recently
• Scan diffing — see exactly what changed since your last scan of the
  same domain, saved as a full infrastructure timeline
• Batch scanning and side-by-side domain comparison
• Distributed reachability probing from ~12 global locations
  (via check-host.net)
• Passive ambient detection — an optional badge that shows the CDN/WAF
  count for the site you're currently browsing, without you having to
  open the popup and scan
• A watchlist with scheduled auto-rescans, so you find out when a
  domain's infrastructure changes instead of having to check by hand
• Optional Shodan/Censys threat-intel lookups for a resolved IP
  (bring your own API key — off by default)

When a scan turns up response headers no provider recognizes yet, each
detected provider's detail view surfaces them as one-click "report this?"
buttons — helping catch new provider signatures as CDNs roll out
infrastructure changes. On by default, and fully disclosed:

• Sends a provider ID, the header name (or a short note you write), and
  the domain it was seen on — never your IP, and nothing beyond that.
• Domain is included deliberately: it's what lets a report be checked
  against reports from other domains, so a header that only ever shows
  up on one site (probably that site's own header, not a real provider
  signal) can be told apart from one that's genuinely corroborated
  across many unrelated domains.
• Fully visible and controllable in Settings — turn it off, or point it
  at your own self-hosted collector, any time. No account or sign-up
  required either way.

All scanning and scoring happens locally in your browser. The only
network calls this extension makes are: (1) DNS-over-HTTPS lookups and
direct HTTP requests to the domain you choose to scan, (2) daily
refreshes of official public IP ranges from each provider, and (3) the
opt-out crowd-report submissions described above. No analytics, no ads,
no tracking of your browsing beyond what you explicitly scan.


JSON/CSV/Markdown export, dark and light themes, a side-panel view,
keyboard shortcuts (Ctrl+Shift+S popup, Ctrl+Shift+D side panel,
Ctrl+Shift+V scan from clipboard), and settings synced across your
Firefox profiles.

Source: https://github.com/VuJohn123/CDNs_WAFs_Detector