There is a third party tool which can say who is hosting this website when website is behind Cloudflare proxy. is that a Cloudflare bug?
I somewhat doubt that. Can you link to that tool?
1 Like
yeah sure. Try these 2 websites.
nomadicmatt[D]com
securityheaders[D]com
is that a Cloudflare bug? But websites like barackobama[D]com and taylorswift[D]com they cannāt tell.
I presume you are referring to the site mentioning āBluehostā. Is that right?
They probably either use historic domain data or try to determine it based on leaked IP addresses (e.g. MX records). That should not be a Cloudflare issue.
No. itās not historical data. They couldnt say that when I was checking that 4 months ago.
its historical data or bad Cloudflare configuration(you can leak your ip address in the dns when used wrong way)ā¦ in my case its showing old ip before moving to Cloudflare
which website u checked? I think, itās Cloudflare issue.
nopeā¦ if they find your ip the problem is in your sideā¦ you are leaking it in some way, check you site dns and see all the records
1 Like
it tells exactly hoster. Already tested so many websites.
Itās pretty weird because it doesnāt show that for my domain
Maybe itās because you use Buehost provided mail?
$ dig MX nomadicmatt.com +short
20 mx2.emailsrvr.com.
10 mx1.emailsrvr.com.
3 Likes
Itās showing my third party email host as the one hosting my website. Not so accurate.
3 Likes
No. itās not showing mx record as host. Do you guys need examples?
if you are saying so, Then check this abandarage[D]com
As @sandro already mentioned, this looks like itās using historical data or MX records. But youāve got a bunch of Cloudflare veteran users checking all our own domains for this, and what itās turning up for us is either outdated historical data, or mail hosts. We canāt explain other peopleās data leaks, but weāve got our own sites pretty well clamped down.
Try this one: integrityoklahoma.com (No, this site isnāt hosted in Europe, and never has been)
2 Likes
Ok. Maybe in some cases, itās right. But I mentioned websites above there belong to me so I know how I prepared those. I changed hosting 4 times. In every time I did that from zone editor. I didnāt turn off DNS(DIDNāT TURN TO GRAY COLOR). Changed IP only. And also I mentioned before Itās didnāt show anything 4 month ago.
On my main test domain (which has been behind Cloudflare for a while and has āgoodā config based on what I currently consider my own best-practices) I just get this:
My other domains are similarly obfuscated. Same results when run them through sites like builtwith.com etc. No mention of real hosts anywhere to be found.
2 Likes
Seems I missed the Cloudflare Hosting blog post. When did that start? 
2 Likes
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.