Home / Technologies / Consent & Security / Cloudflare Turnstile

Consent & security

Cloudflare Turnstile in Homepage Source

Turnstile is Cloudflare's CAPTCHA alternative: it runs non-interactive browser challenges to block bots on forms and logins without puzzles or a reCAPTCHA-style checkbox.

The source-code fingerprint

The widget API loads from challenges.cloudflare.com/turnstile/v0/api.js and renders into an element with the cf-turnstile class.

Likely false positives: None significant; the challenges.cloudflare.com/turnstile path is specific to Turnstile and distinct from Cloudflare's other products.

Stored source examples for Cloudflare Turnstile

These examples matched challenges.cloudflare.com/turnstile in stored homepage source when the query was sampled on 2026-10-14. The sites may have changed since the source was captured. A match establishes a source reference; it does not confirm an active installation or code execution.

• www.discogs.com .../div>\n</div>\n\n\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>\n <script>\n docum...
• searchengineland.com ...!-- Cloudflare Turnstile captcha -->\n\t\t<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit&onload=onloadTurnstileCallback" d...
• www.pewresearch.org ...</script>\n<script id="cloudflare-turnstile-js" src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback&#038;ver=1.0.0"></...
• haveibeenpwned.com ...gDHx3_RX2Yo" fetchpriority="high" />\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit" defer nonce="Sbd13PwCr1KwoTexr06...
• www.iea.org ... <!-- End Google Tag Manager -->\n\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=_turnstileCb" async defer></script>\n</head...
• zonely.gen.tr ....turnstile);\r\n return loadOnce('turnstile', 'https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit')\r\n .then(() => {\r\n ...
• mominstruments.com ...-strategy="async" id="cloudflare-turnstile-js" src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script>\n<script id="cloudflare-turnstile-js-af...
• www.hostinger.com ...cript src="/gtag.v4.js" defer></script><script src="https://challenges.cloudflare.com/turnstile/v0/api.js" defer></script><script src="https://cdn.amplitud...
• boomeranggso.com ...t data-wp-strategy="defer" id="cfturnstile-js" src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>\n<script id="cfturnstil...
• cryosauna.jp ...</script> <script defer type="text/javascript" src="https://challenges.cloudflare.com/turnstile/v0/api.js" id="cloudflare-turnstile-js" data-wp-strategy="a...
• universalcosmosloveambassador.podia.com ...ustomer = null;\n</script>\n\n \n\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>\n</head>\n\n<body class="user...
• n8n.io ...{siteKey:"0x4AAAAAABbOG6VWcVJCTlUc",verifyJSApiUrl:"https://challenges.cloudflare.com/turnstile/v0/api.js"},paddle:{environment:"production",clientToken:"l...
• www.coingecko.com ...43878903808&upapi=true"></script>\n\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit" data-turbo-track="reload" data-t...
• www.theinformation.com ...a/stripe.js" async></script>\n\n \n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>\n\n <style>\n img {\n ...
• www.midjourney.com ...a property="og:url" content="website"/><script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script><link rel="preload" hre...
• www.routledge.com ...<html lang="en" class="no-js">\n<head>\n\n<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>\n\n\n<script src="https://cdn...
• www.adr.org ... <!-- End Google Tag Manager -->\n\n\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>\n</head>\n\n<body style="disp...
• www.onetrust.com ...2873b8cfd7209-lc.min.js"></script>\n\n\n\n\n<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>\n\n \n \n\n <scrip...
• www.craiyon.com ...8ae22'></script>\n\n\t<!-- Turnstile -->\n\t<script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script>\n\n\t<!-- SvelteKit head -->\n\t\n\t\t<link hr...
• www.worldwildlife.org ...hallenges.cloudflare.com">\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit" defer></script>\n \n\n ...
• memberpress.com ...s-before\n</script>\n<script id="cfturnstile-js" src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit&#038;onload=cfturnstileOnload"></...
• www.iplocation.net ....js?v=1781115815?version=1.2'></script><script src="https://challenges.cloudflare.com/turnstile/v0/api.js" defer></script>\n<script src="https://ajax.google...
• www.interaction-design.org ...uest-DgO9kGt9.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer ></script>\n <link rel="mo...
• www.techspot.com ...);\n });\n })(els[i]); }\n };\n </script>\n <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=tsTurnstileInit&render=explicit" async def...
• coolors.co ..."/assets/icon/css/icons.css?v=22">\n\n\t\t\t<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>\n\t\n\n\n\t<!-- VALID Iubenda --...
• openreview.net ...tml-full.js" as="script"/><link rel="preload" href="https://challenges.cloudflare.com/turnstile/v0/api.js" as="script"/><link rel="preload" href="https://j...
• www.miniclip.com ...iclip.com/"}</script><script data-n-head="ssr" src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script><link rel="preload" hre...
• www.businessoffashion.com ...a-integration="inlineScripts"></script><script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script><script type="text/java...
• www.ip2location.com ...250px;max-width:100%;}\n\t}\n\t</style>\n\n\t\t<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit" defer></script>\n\t</head>\n\n\t<body...
• clipdrop.co ....paddle.com/paddle/paddle.js"></script><script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script><link rel="preload" hre...

Showing 30 checked source examples. The headline is estimated matches. Open the full ranked list, inspect the matched source, and export the domain list →

Related technologies

How this works

The headline distinguishes candidate upper bounds (index prefilter), estimated matches (a projection from checked samples) and verified matches (an exact count established by the engine). The index contains 131,219,565 homepage documents, one homepage per hostname, including subdomains. The source index was promoted 2026-09-22 and follows a quarterly rebuild schedule. The sample date is when this query was checked against the stored index, not a new crawl of each example site.

Comparing adoption across tools? The Web Technology Adoption Report ranks the most common tags in the index side by side.