One checker says proxed, another says not proxied

[buzzmandt]

What is the name of the domain?

lowtechlinux.com

What is the error message?

selesti says not using proxy, cf.sjr.dev says it is proxied

What is the issue you’re encountering

I don’t know if something is wrong with proxy

What steps have you taken to resolve the issue?

I have 2 other sites working right and compared the dns values for both as close as possible.

What feature, service or problem is this related to?

I don’t know

What are the steps to reproduce the issue?

Checked on Selesti: Check if Cloudflare is enabled - by Selesti Ltd
and cf.sjr.dev. Shareable results link here: https://cf.sjr.dev/tools/check?5fe7441a8d3b4e7d90554d18bee481d4

Screenshot of the error

[cscharff]

The first tool appears to have some inconsistent logic. The site resolves to Cloudflare IP addresses and returns Cloudflare headers.

❯ curl -Ikv https://lowtechlinux.com
* Host lowtechlinux.com:443 was resolved.
* IPv6: (none)
* IPv4: 104.26.6.125, 104.26.7.125, 172.67.70.48
*   Trying 104.26.6.125:443...
* Connected to lowtechlinux.com (104.26.6.125) port 443
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* (304) (IN), TLS handshake, Unknown (8):
* (304) (IN), TLS handshake, Certificate (11):
* (304) (IN), TLS handshake, CERT verify (15):
* (304) (IN), TLS handshake, Finished (20):
* (304) (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=lowtechlinux.com
*  start date: Jun 14 17:58:19 2025 GMT
*  expire date: Sep 12 18:58:09 2025 GMT
*  issuer: C=US; O=Google Trust Services; CN=WE1
*  SSL certificate verify ok.
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://lowtechlinux.com/
* [HTTP/2] [1] [:method: HEAD]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: lowtechlinux.com]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [user-agent: curl/8.7.1]
* [HTTP/2] [1] [accept: */*]
> HEAD / HTTP/2
> Host: lowtechlinux.com
> User-Agent: curl/8.7.1
> Accept: */*
>
* Request completely sent off
< HTTP/2 200
HTTP/2 200
< date: Fri, 20 Jun 2025 14:23:58 GMT
date: Fri, 20 Jun 2025 14:23:58 GMT
< content-type: text/html; charset=UTF-8
content-type: text/html; charset=UTF-8
< vary: accept,content-type,Accept-Encoding
vary: accept,content-type,Accept-Encoding
< link: <https://lowtechlinux.com/wp-json/>; rel="https://api.w.org/", <https://wp.me/c3ekK>; rel=shortlink
link: <https://lowtechlinux.com/wp-json/>; rel="https://api.w.org/", <https://wp.me/c3ekK>; rel=shortlink
< content-security-policy: upgrade-insecure-requests;
content-security-policy: upgrade-insecure-requests;
< last-modified: Fri, 20 Jun 2025 13:22:27 GMT
last-modified: Fri, 20 Jun 2025 13:22:27 GMT
< cf-cache-status: HIT
cf-cache-status: HIT
< set-cookie: __cf_bm=LhGn7xgXCS25ABtvmTSs2R_WftVB3AYlTDWtsHr4840-1750429438-1.0.1.1-.I60oX9E7FQ7YHVim.1cguMKGLBD7Y5Qh6uOcTXvga38sPI9EkO9YH1bksywghgXK1V0nb21M9nc.2K6xR26FQ0vZvvS9_KBI8Nz1AcShXE; path=/; expires=Fri, 20-Jun-25 14:53:58 GMT; domain=.lowtechlinux.com; HttpOnly; Secure; SameSite=None
set-cookie: __cf_bm=LhGn7xgXCS25ABtvmTSs2R_WftVB3AYlTDWtsHr4840-1750429438-1.0.1.1-.I60oX9E7FQ7YHVim.1cguMKGLBD7Y5Qh6uOcTXvga38sPI9EkO9YH1bksywghgXK1V0nb21M9nc.2K6xR26FQ0vZvvS9_KBI8Nz1AcShXE; path=/; expires=Fri, 20-Jun-25 14:53:58 GMT; domain=.lowtechlinux.com; HttpOnly; Secure; SameSite=None
< server: cloudflare
server: cloudflare
< cf-ray: 952bed54bd9042fe-EWR
cf-ray: 952bed54bd9042fe-EWR
<

[buzzmandt]

Thank you very much. I guess I just wanted to feel better after someone else had a look at it.