Home / Technologies / Consent & Security / Cloudflare Turnstile

Consent & security

Websites Using Cloudflare Turnstile

Turnstile is Cloudflare's CAPTCHA alternative: it runs non-interactive browser challenges to block bots on forms and logins without puzzles or a reCAPTCHA-style checkbox.

205,360 sites detected across 129,313,463 indexed domains refreshed monthly · August 2026

The source-code fingerprint

challenges.cloudflare.com/turnstile Search all 205,360 results →

The widget API loads from challenges.cloudflare.com/turnstile/v0/api.js and renders into an element with the cf-turnstile class.

Likely false positives: None significant; the challenges.cloudflare.com/turnstile path is specific to Turnstile and distinct from Cloudflare's other products.

Example websites using Cloudflare Turnstile

These domains all contain the challenges.cloudflare.com/turnstile fingerprint in their homepage source right now. A match is a verified substring of the live page, so confidence is high, the false positives noted above are the main caveat.

Showing 30 of 205,360 matching sites. Open the full ranked list, inspect the matched source, and export the domain list →

Related technologies

reCAPTCHAhCaptchaOneTrustCloudflare

How this works

SearchWebCode indexes the raw HTML, CSS and JavaScript source of public web pages. To find sites using Cloudflare Turnstile we match the literal fingerprint challenges.cloudflare.com/turnstile, the code Cloudflare Turnstile ships, against that index, then verify each match against the raw source. Counts reflect the current index (129,313,463 domains, refreshed monthly, last built August 2026) and grow as we scale toward the whole web. Run the search yourself to see every match, view the full page source for any result, filter by TLD or regex, and export the domain list.

Comparing adoption across tools? The Web Technology Adoption Report ranks the most common tags in the index side by side.