Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Cloud Services (32%)
• Domains (32%)
• Web Tools (14%)
• Hosting (14%)
• E-mail (7%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Paris	Cloud Services	10 hours ago
New York City	Hosting	3 days ago
Manchester	Domains	23 days ago
Angers	Cloud Services	1 month ago
London	Domains	1 month ago
Noida	Hosting	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  DFIR Radar (@DFIR_Radar) reported 3 minutes ago

  Kratos PhaaS is a maturing Microsoft 365 credential-theft platform active since Sept 2025, with 1,484 previously unattributed sandbox sessions now linked to the family across 20+ countries. - Kratos runs three page generations (V0, V1, V2), each with distinct exfiltration endpoints: V0 POSTs to /PTT/SOft/mini.php, V1 to next.php/nex.php/n3xt.php, V2 to save.php. The kit chains legitimate platforms (SharePoint, Canva, DocuSign lures) through Cloudflare Turnstile anti-bot checks before serving a fake Microsoft 365 login. Browser tab title is nearly always "Authentication" and an animated envelope with "Loading in progress..." precedes the credential form. - The single best hunting fingerprint: HTTP requests to both /assets/img/barr.svg and /assets/img/lg.svg in the same session. That pair yields 90% recall with near-zero false positives. Key hashes: lg.svg = cd231b895bbcd7154b81df1e065bf02f1ec667b920c8b6d23308cd509833b5ea, styles.css = c447e75f1029ed7a5882add16bcd13ad44be3bd47c93c830ff39185e23d25ebb (connects 636 tasks across V1 and V2). - Notable defanged IOCs: razen[.]online, enerdizerandtron[.]de, jumpast[.]es, abal[.]my, dufllot[.]sbs, trisrnareprjdocz[.]com; operator IP 41.128.0[.]142. URL tokens factura, dgt, and abogados signal Spanish-language affiliates. - If WebSocket activity appears alongside credential POST, treat it as a possible AiTM indicator. #DFIR_Radar

• 
  BeingInvested (@0xbeinginvested) reported 3 minutes ago

  HOW NOXA PROJECT MADE $10M IN 7 DAYS AND GHOSTED This might be the most unserious project to ever make serious money. Here’s the playbook: Noxa raised $0 from VCs and launched their token on a network nobody had ever heard of Been live since 2024, and literally no one talked about them until Robinhood showed up. Then in one week on the Robinhood chain, they made $10,000,000 (10 million) In 7 days. But instead of scaling, it all fell apart. They paused new token launches to stop vamp attacks. Their main domain went down from a Cloudflare issue. Then they diverted 100% of fees to creators and pools. Launched a new site that people are calling a potential drainer. And the internal drama?Insane. The Noxa deployer and website are owned by a random dev. The Noxa fees wallet? Goes straight to the founder's wallet The deployer asked for a split. Founder said no. So the deployer turned deploying OFF, then turned platform fees OFF. $10M in a week. And now the project is a total fumble. This is crypto in 2026.

• 
  Richard Illingworth (@RCIllingworth) reported 5 minutes ago

  a GTM engineer rang my team screaming we'd ripped all his inboxes offline. we hadn't touched a thing... he was adamant we'd f*cked his entire campaigns and that all of it was our fault, so we went digging through the back end to find out what actually happened. turns out HE'D ripped all the DNS off the domains himself. he'd pulled everything out of Cloudflare, re-enlisted it over to Porkbun, then changed the forwarding settings while he was at it. so we went to reapply everything top-down from a CSV to fix it. he joined the account 10 minutes later and ripped it all straight back out again, then moaned that it had "automatically happened again." it took my team 12 hours to work out he'd been messing in the back end the whole time. that's half a day gone between me, my business partner, my ops director and my head of client success. four people chasing a problem one bloke created and wouldn't own, all because he couldn't just say "yeah, i f*cked it, that was me." GTM engineering done properly is genuinely powerful. what went wrong here had nothing to do with the function and everything to do with personal accountability. when something breaks in outbound, everyone's instinct is to blame the tool or the vendor or the inbox provider or literally ANYONE but themselves. but the most expensive failures i see are almost never technical at all. they're someone refusing to say three words: “i got it wrong.” lesson: own the mistake faster than you chase the fix.

• 
  W V R 👊🏼🦾 (@WVROfficial) reported 6 minutes ago

  I had to make some changes today and it costed me a MONTH of Codex Usage! I think it’s worth it for me to talk about it - make sure this doesn’t become you!!! So, I’m a startup founder, just like all of you guys!! We do websites as one of our many services - like a lot of the people here on TPOT where tech lives. Why wouldn’t we? It’s easy, we can outclass competition on speed, much more. Anyway - that’s not the point. The point is that i serve my sites with a wrapper that gets served over my host. That host uses ESBuild. To ship stuff that won’t compile on ES Build, and on occasion just for like more complex websites like 3D sites or heavy SEO sites with a lot of files and assets - i use a CDN. Works great, totally fine. But I realized today I had a client site’s files stored on an R2 bucket that was on the client’s domain. In this case the big issue with that is my own IP! We make the content for them, do their SEO, their communications, and more - and i very stupidly was serving everything from a CDN that was on domains I don’t own and control via my Cloudflare. In human terms that means my client could say “**** you” tomorrow and walk away with the extremely robust SEO machine I built them. So I had to spend almost a half a month worth of codex credits today to fix it ASAP. All I can say is that I won’t make that mistake again - even though it never hurt my business - it could have! And that matters.

• 
  ₽ⱤΞΞ₮Ⱨ△M ₭Ɏ△И△M (@pkyanam) reported 10 minutes ago

  @AniC_dev @asciidotdev @dillon_mulroy can we get CloudFlare to help my boy optimize this??

• 
  Ali (@ycjgt) reported 12 minutes ago

  Cloudflare DO and D1 are down down bad

• 
  Масе Дон (@macedonovski) reported 15 minutes ago

  free dns choice not logging open source (for all devices settings network dns set private copy paste from site) #libredns 2 url adresses of 2 links of choice with or without ads - like adblock but cloudflare from an austrian security server.

• 
  VESKALD (@veskaldofficial) reported 18 minutes ago

  Trading keys can't reach us even by mistake. A key with trade or withdrawal rights is rejected at submission — never stored. And there's no server IP to whitelist it to: our infrastructure sits behind Cloudflare with no public address. The exchange itself won't let it work. Not a policy — an architectural dead end.

• 
  轩源 (@4xy) reported 19 minutes ago

  @Cloudflare our production D1 database has been down for over an hour due to this incident. Dashboard returns 500 and Workers return D1_ERROR: internal error. Any ETA? Thanks.

• 
  Eric Taylor (@bcs_erictaylor) reported 23 minutes ago

  Date: 7/15/2026 Here is an update on our updated information on our proactive efforts to heavily impact the Kali365 platform. As expected, the user "Octopus King" is working hard to rebuild is infrastructure, but we have the fingerprinting locked in and will continue our efforts. At the time of this blog posting, we have submitted an IC3 report but honestly not expecting much. I believe it will be up to companies like ours to keep submitting takedown requests as fast as we see them to limit its operations. Below is the information Believed owner and creator of Kali365: Handle: Octopus King TG: @tentacle_network Completed 'Takedown Requests' submitted to Namesilo FQDN: updateteampanel[.]xyz Completed 'Takedown Requests' submitted to BL Network: IP Address: 199.21.221[.]21 Pending 'Takedown Requests' submitted to BL Network: IP Address: 162.33.178[.]105 IP Address: 72.5.43[.]195 Pending 'Sinkhole Requests' submitted to @Cloudflare FQDN: updateteampanel[.]xyz FQDN: privatetoken[.]app FQDN: servoquil[.]org FQDN: vuredonte[.]org FQDN: yalmorind[.]org FQDN: ondrevail[.]org FQDN: caldivore[.]org FQDN: mvpaffiliatecz[.]site FQDN: vuredonte[.]org #Kali365 #CTI #threatintel

• 
  Mick.net - Maker: Document.Bot 🤖 BestTime.app 🎉 (@mick__net) reported 23 minutes ago

  @sumukx I like 5.6 but same here in terms of OCD chasing targets. I asked to use a cloudflare tunnel. After 1h still OCD retrying i asked why it took so long and what it is blocking it. Then it replied i need you to run ‘cloudflare login’ in the terminal for auth. I think 5.5 would have asked directly instead of trying really hard with 100’s of unsuccessful work arounds.

• 
  Marco Scata (@marcoscata) reported 23 minutes ago

  Cloudflare outage 2020: Erroneous BGP route advertisement from a small ISP made Cloudflare unreachable. Evidence of insufficient routing security validation. #CompliantDeliveries #ProofDrivenDeliveries

• 
  Eli Edelkind (@eliedelkind) reported 28 minutes ago

  @LiminalPanda @ZackKorman So, for many companies if you have to use a VPN they probably aren’t a legitimate user. But I can see some scenarios that you’re right for sure. But the other protections in Cloudflare aren’t fool proof either which is why defense in depth and attack surface minimization is always good. Also, geoblocking isn’t just WAFs. There’s many “no regret” blocks across different network capabilities.

• 
  TSAIBEE (@tsaibee15) reported 30 minutes ago

  Thank you for using CHUNILIB. Cloudflare is currently experiencing service issues, which may cause some features of the website to be temporarily unavailable. We apologize for the inconvenience. #chunilib

• 
  CSMurthy (@srism) reported 30 minutes ago

  @kav_kavi11 Checking the timeout configurations on your reverse proxy (e.g., Nginx, Cloudflare) or load balancer (e.g., AWS ALB) helps you instantly verify whether the traffic spike is triggering slow responses that break the gateway's current timeout threshold. So B is the correct answer

• 
  broisnees (@broisnees) reported 33 minutes ago

  Hey @Cloudflare we support d1!

• 
  Jarrett (@JarrettLusso) reported 34 minutes ago

  @Cloudflare how do we get someone to fix image transformations randomly 404ing? Support is telling me it's our origin, but that is R2. Doesn't seem like anyone cares to actually fix it cause it's been broken for days.

• 
  Hrishikesh Barua (@talonx) reported 39 minutes ago

  Outages today in both Google Cloud's and AWS's European datacenters (unrelated) caused many downstream services to blink out. We have been seeing this pattern of cascading service failures forever, but it only came under the spotlight after 2025's Cloudflare and AWS outages. The AWS outage in eu-central-1 was limited to a single AZ euc1-az2 in Germany, but it took out services like HENNGE One (a Japanese cloud security service), Confluent (managed Kafka), FusionAuth, among others. In addition, AWS Cloudfront suffered a global outage, leading to outages in downstream services like Frontegg, TigerData, Instructure (Canvas), Huggingface, Coda, Ubiquiti, Doxy, Blackboard. EdTech saw two outages with both Canvas and Blackboard being affected. And since FrontEgg is an identity and user management platform, its own downstream services led to more disruption. AWS's initial report says "the system responsible for distributing routing configuration to our network processors failed to load the updated configuration data correctly" - for the Cloudfront outage, which affected customers using VPC origins. The Google Cloud outage in europe-west4-a (Netherlands) was due to a cooling failure and affected VMWare Engine, NetApp volumes, and their bare metal servers. Both outages are resolved, but the same question remains - how do we prepare for cascading failures when the majority of your application's dependencies are ultimately dependent on a few providers?

• 
  Hot Aisle (@HotAisle) reported 44 minutes ago

  @CherryJimbo @Cloudflare @CloudflareDev wish they'd move off salesforce for their support system...

• 
  Keith Kaplan (@KeithTradeSmith) reported 45 minutes ago

  Cloudflare $NET just notched a new all-time high this week, adding fresh fuel to the bull market in securing the world's AI, computers, and data centers. Back in March, we introduced our Agent Supernova thesis, the idea that AI is now advanced enough to take over everyday tasks, from managing factory schedules to running financial analysis to writing software. Over the next 12 to 24 months, that list keeps growing. Within two years, the number of AI agents operating in the American economy isn't likely to grow 10X or even 1,000X. Try 10,000X. That kind of expansion needs infrastructure, security, and traffic management at scale, and that's exactly where Cloudflare $NET sits. Cloudflare is one of the world's leading Content Delivery Network firms, speeding up website content and cutting latency and bandwidth costs. Add in its cybersecurity services, AI agent management tools, and AI agent transaction services, and Cloudflare starts to look like an AI agent conglomerate. The numbers support the thesis. Cloudflare's revenue grew 29% in 2024 and 30% in 2025. Wall Street projects revenue near $2.79 billion in 2026, roughly 29% growth, rising toward $3.6 billion by 2027. After ten months of sideways consolidation, the stock broke out to new highs today. If the Agent Supernova unfolds as expected, Cloudflare's diversified position in security and agent management should keep driving growth well past this breakout.

• 
  evan mercer (@EMercerCap) reported 46 minutes ago

  I’ll say this once: These 8 stocks could create a $3 million opportunity before 2027. $TSLA (Tesla) — Don’t buy $AAPL (Apple) — Don’t buy $CRM (Salesforce) — Buy at $158–$166 $CRWD (CrowdStrike) — Buy at $190–$200 $NOW (ServiceNow) — Buy at $100–$105 $NET (Cloudflare) — Buy at $265–$275 $FTNT (Fortinet) — Buy at $156–$163 $ZS (Zscaler) — Buy at $140–$148 Strong companies can still be bad buys at the wrong valuation. Which pullback would you buy?

• 
  Ash Designs (@dezign_ash) reported 50 minutes ago

  @BraedendotTECH We're not as sharp as we were "before AI". We're just one @Cloudflare outage away from realizing how dependent we are on AI.

• 
  Sunder (@talk2sunder) reported 51 minutes ago

  Our Teams bot went silent. Zero errors. Zero logs. Azure said healthy, Cloudflare said healthy, our servers said healthy. Slack worked fine. Same bot, same endpoint. Gave it to Claude (Fable 5). It pointed the bot's endpoint at a plain webhook listener. Microsoft's messages showed up instantly. So Teams WAS sending — something about our edge was unreachable. One openssl probe later: our CDN required TLS 1.3, and Microsoft's Teams delivery fleet still speaks TLS 1.2. No logs because of handshake failire. Fable 5 rocks.

• 
  Sachin Joshi (@Sachin_is_here) reported 51 minutes ago

  The free tier was not only marketing. Every new customer added traffic, attack data and operational experience. That helped Cloudflare improve threat detection, justify more data centres and spread infrastructure costs across a larger network.

• 
  Brais Calvo (@braiscv) reported 52 minutes ago

  @antonosika On Cloudflare, mainly for Zero Trust. And honestly, the switch to token based billing for the Cloud features has been pretty terrible. Another reason for hosting it externally is to have more control and transparency over the stack.

• 
  SoothSpider 🇨🇦🍁🧡真🔬💻Ω 🐶😼🌎 (@SoothSpider) reported 54 minutes ago

  @45Homelab Can I stick a PVE (zfs mirrored) at my out-of-State/Province friend's house configure some basic services with OOTB easy HA/redundancy? 🤔 Can I put that behind a $5/month CloudFlare load balancer? Can I spin up a new service from scratch knowing nothing in a few hours? 🤔

• 
  Maran (@TheMaran) reported 54 minutes ago

  > raised $0 from vcs > launched their token on a network nobody heard > been live since 2024, literally no one heard about them until Robinhood > made ~$10,000,000 within a week on robinhood chain > paused new token launches to get rid of vamp attacks > main domain went down because of a cloudflare issue > diverted 100% fees to the creators & pools > launched a new site, may be a drainer I think this is an unserious project that made serious money in a short duration

• 
  ALEXYZ (@Alexvx_nft) reported 54 minutes ago

  YOU'RE BURNING API DOLLARS ON TASKS THAT HAVE A FREE PATH. MOST BUILDERS USE EXACTLY ZERO OF THEM. — Zefi mapped every major lab's free tier for a week (verified July 2026) most people pay before they even check what's unclaimed: > Google AI Studio · ~1,500 req/day · 1M tokens/min · no card > Groq · 14,400 req/day · 300+ tok/sec > OpenRouter · ~26 free models · one API key > OpenAI + Anthropic · $5 trial credits each > startup stack · $25K + $25K API · up to $350K Google Cloud > student stack · Cursor Pro + Perplexity + Copilot = $0 full dev setup — the Claude Code hack is the part nobody bookmarks: point ANTHROPIC_BASE_URL at Groq / Cloudflare / OpenRouter agentic loop on free third-party inference not official. works anyway. — same week GPT-5.6 tier routing went viral and loops guides hit 1.2M views CT still argues model scores while leaving $440+ in free access on the table the leak isn't which model you picked it's which free path you never claimed full map quoted below

• 
  TTM ⠞⠺⠊⠝ ⠞⠥⠗⠃⠕ (@twinturbomonkey) reported 59 minutes ago

  @egybest_1 No service that matters to me is tied to SMS any more. All the 2FA are tied to app-based auth on phone and computer. Verifications are email-based when available. Cloudflare and mail hosting are paid out of bank accounts with plenty of funds on yearly basis. 🧵

• 
  inder (@InderpreetSingh) reported 60 minutes ago

  I still think about this a lot. So many websites are struggling with Identity management. Standards are in shambles and enforcement is non existence. What that means is folks like Cloudflare and Vercel are shutting down all AI bots and smaller teams have no fine grained control.