News

Application Security

Cloudflare exposes sensitive data from millions websites

sam.jpg
Samvel Gevorgyan
CEO, CYBER GATES
I cover cybercrime, privacy and security in digital form.

Cloudflare, a multibillion-dollar startup that runs a popular content delivery network used by more than 5.5 million sites, accidentally leaked customers' sensitive information for months.

Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem (the flaw was dubbed Cloudbleed) with their edge servers, which were running past the end of a buffer and returning memory that contained private information such as HTTP cookies, authentication tokens, HTTP POST bodies, and other sensitive data. And some of that data had been cached by search engines.

We quickly identified the problem and turned off three minor Cloudflare features (email obfuscation, server-side excludes and automatic HTTPS rewrites) that were all using the same HTML parser chain that was causing the leakage. At that point it was no longer possible for memory to be returned in an HTTP response.

— says in Cloudflare report

The Cloudbleed security issue in Cloudflare servers has a significant impact on numerous major organizations, including Uber, Fitbit, 1Password, and OKCupid. Cloudbleed also affects mobile apps, because, they are developed using the same backends as browsers for content delivery and HTTPS (SSL/TLS) termination.

Exposed sensitive data sample screenshot taken by Tavis Ormandy (Photo: chromium.org)

So, how can I find out which services I have accounts with are using Cloudflare?

Note: The following list includes some mobile apps that may have been affected.

Notable Sites

  • authy.com
  • coinbase.com
  • betterment.com
  • transferwise.com
  • prosper.com
  • digitalocean.com
  • patreon.com
  • bitpay.com
  • news.ycombinator.com
  • producthunt.com
  • medium.com
  • 4chan.org
  • yelp.com
  • okcupid.com
  • zendesk.com
  • uber.com
  • poloniex.com
  • localbitcoins.com
  • kraken.com
  • 23andme.com
  • curse.com
  • counsyl.com
  • tfl.gov.uk

Alexa Top 10,000 affected sites

  • upwork.com
  • codepen.io
  • fiverr.com
  • thepiratebay.org
  • extratorrent.com
  • getbootstrap.com
  • jquery.com
  • laravel.com
  • laracasts.com
  • seriouseats.com
  • bitdefender.com
  • ziprecruiter.com
  • glassdoor.com
  • pastebin.com
  • fitbit.com
  • discordapp.com
  • change.org
  • feedly.com
  • zoho.com
  • irccloud.com
  • 000webhost.com
  • 1001freefonts.com
  • 101greatgoals.com
  • 10minutemail.com
  • 123telugu.com
  • 1hhhh.net
  • 1jux.net
  • 1news.az
  • 1sale.com
  • 1stwebdesigner.com
  • 24horas.cl
  • 24sata.hr
  • 2ch-c.net
  • 2ch.hk
  • 2ch.net
  • 2ip.ru
  • 3bmeteo.com
  • 4chan.org
  • 4dsply.com
  • 4pda.ru
  • 4tube.com
  • 5giay.vn
  • 800notes.com
  • 96down.com
  • abidjan.net
  • abs-cbnnews.com
  • adafruit.com
  • add-anime.net
  • addicted2success.com
  • addictinginfo.org
  • addmefast.com
  • addtoany.com
  • adf.ly
  • adfoc.us
  • ads-id.com
  • adult-empire.com
  • advfn.com
  • adxpansion.com
  • aflam4you.tv
  • aflamneek.com
  • aftabir.com
  • agilebits.com
  • ahlamontada.com
  • ahlynews.com
  • ahnegao.com.br
  • aitnews.com
  • aksam.com.tr
  • aktifhaber.com
  • al-akhbar.com
  • aleqt.com
  • alexaboostup.com
  • alfajertv.com
  • alfavita.gr
  • alhilal.com
  • alison.com
  • alistapart.com
  • aljaras.com
  • allanalpass.com
  • all.biz
  • allkpop.com
  • allmyvideos.net
  • alltop.com
  • almaany.com
  • almasryalyoum.com
  • almesryoon.com
  • alnaharegypt.com
  • alphacoders.com
  • alrakoba.net
  • alternativeto.net
  • alternet.org
  • alwafd.org
  • alwatanvoice.com
  • alweeam.com.sa
  • amadershomoybd.com
  • amarujala.com
  • amino.dk
  • anandabazar.com
  • androidauthority.com
  • androidcentral.com
  • androidpolice.com
  • angloinfo.com
  • anime44.com
  • animeflv.net
  • animeid.tv
  • animenewsnetwork.com
  • anipo.jp
  • anitube.se
  • ann.az
  • annunci69.it
  • antarvasna.com
  • antena3.ro
  • antyweb.pl
  • any.gs
  • ap7am.com
  • apherald.com
  • apne.tv
  • aporrea.org
  • appadvice.com
  • appbrain.com
  • appstorm.net
  • arabsh.com
  • archive.is
  • argentinawarez.com
  • arioo.com
  • aristeguinoticias.com
  • armorgames.com
  • arouraios.gr
  • articlesnatch.com
  • ashleymadison.com
  • ashleyrnadison.com
  • atlas.sk
  • attracta.com
  • atwiki.jp
  • authorstream.com
  • avaaz.org
  • avaz.ba
  • avazutracking.net
  • avito.ma
  • avn.info.ve
  • azertag.com
  • aznews.az
  • azyya.com
  • b1.org
  • bab.la
  • babyoye.com
  • backlinks.com
  • bakufu.jp
  • bancdebinary.com
  • banglanews24.com
  • barstoolsports.com
  • bbspink.com
  • bc.vc
  • bdr130.net
  • beeg.com
  • behindwoods.com
  • belboon.com
  • bestblackhatforum.com
  • bezaat.com
  • bicaps.com
  • bigrock.in
  • bikroy.com
  • billiger.de
  • billionuploads.com
  • binaryoptionsnewbies.com
  • binsearch.info
  • bitcoincharts.com
  • bitshare.com
  • bitsnoop.com
  • bizsugar.com
  • blackhatteam.com
  • blackhatworld.com
  • blankrefer.com
  • bleepingcomputer.com
  • blekko.com
  • blinklist.com
  • blip.tv
  • blockchain.info
  • blogcatalog.com
  • blogfa.com
  • blogs.com
  • boards.ie
  • boo-box.com
  • boxden.com
  • boxingscene.com
  • brainpickings.org
  • brainyquote.com
  • brandyourself.com
  • brasil247.com
  • briian.com
  • broadwayworld.com
  • bronto.com
  • brooonzyah.net
  • brusheezy.com
  • btc-e.com
  • bubblews.com
  • bufferapp.com
  • bukkit.org
  • burbuja.info
  • burnews.com
  • business2blogger.com
  • businessforhome.org
  • buzztheme.net
  • camplace.com
  • cancan.ro
  • careers360.com
  • car.gr
  • catracalivre.com.br
  • cbox.ws
  • cda.pl
  • ce4arab.com
  • celebuzz.com
  • charter97.org
  • chatrandom.com
  • cheathappens.com
  • chinavasion.com
  • chomikuj.pl
  • christian-dogma.com
  • cima4u.com
  • ciudad.com.ar
  • ck101.com
  • clasicooo.com
  • classifiedads.com
  • cleanfiles.net
  • clickbank.com
  • clickbank.net
  • clip.vn
  • clixsense.com
  • cloudflare.com
  • clubedohardware.com.br
  • cmse.ru
  • codepen.io
  • codeschool.com
  • coinbase.com
  • col3negoriginal.lk
  • colourlovers.com
  • comicbookmovie.com
  • compucalitv.com
  • copacet.com
  • cpalead.com
  • cpasbien.com
  • cpasbien.me
  • crackberry.com
  • creativecommons.org
  • cricfree.tv
  • crictime.com
  • crocko.com
  • crosswalk.com
  • crunchbase.com
  • crunchyroll.com
  • cs-cart.com
  • cssdeck.com
  • cucirca.eu
  • curse.com
  • cyanogenmod.org
  • cyberchimps.com
  • cyberpresse.ca
  • dailycaller.com
  • daisycon.com
  • dangerousminds.net
  • dardarkom.com
  • dashnet.org
  • davidicke.com
  • davidwalsh.name
  • dawanda.com
  • dawn.com
  • de10.com.mx
  • deadline.com
  • defaultsear.ch
  • defencenet.gr
  • definebabe.com
  • demandforce.com
  • demotywatory.pl
  • deperu.com
  • desidime.com
  • designboom.com
  • designfloat.com
  • designtaxi.com
  • desirulez.net
  • desi-tashan.com
  • desitorrents.com
  • desmotivaciones.es
  • destructoid.com
  • deutsche-wirtschafts-nachrichten.de
  • dev-point.com
  • dhakatimes24.com
  • diariocontraste.com
  • diariodemorelos.com
  • diario.mx
  • diary.ru
  • dicelacancion.com
  • diffen.com
  • digikala.com
  • digitalocean.com
  • digital-photography-school.com
  • digitalpoint.com
  • discuss.com.hk
  • divxplanet.com
  • divxstage.eu
  • dizi-mag.com
  • djmaza.info
  • dlink.com
  • dl-protect.com
  • dnevnik.hr
  • doba.com
  • doisongphapluat.com
  • doityourself.com
  • doostiha.ir
  • dostor.org
  • dota2lounge.com
  • downloadatoz.com
  • downloadming.me
  • downloads.nl
  • dpstream.net
  • drakulastream.eu
  • dramasonline.com
  • dreamamateurs.com
  • dreamincode.net
  • dreamteammoney.com
  • dreamtemplate.com
  • droid-life.com
  • drudgereport.com
  • dryicons.com
  • dsdomination.com
  • duedil.com
  • dumpert.nl
  • dx.com
  • eatlocalgrown.com
  • ebs.in
  • e-cigarette-forum.com
  • econsultancy.com
  • edublogs.org
  • e-estekhdam.com
  • efukt.com
  • egaliteetreconciliation.fr
  • egyup.com
  • el-ahly.com
  • elance.com
  • el-balad.com
  • elbilad.net
  • elbotola.com
  • eldia.com.ar
  • elephantjournal.com
  • elespectador.com
  • elfagr.org
  • elheddaf.com
  • elitepvpers.com
  • elitetorrent.net
  • elkhabar.com
  • elpais.com.uy
  • elshaab.org
  • elwatannews.com
  • el-wlid.com
  • emailmeform.com
  • emoneyspace.com
  • e-monsite.com
  • encuentra24.com
  • englishforums.com
  • enjoydressup.com
  • enwdgts.com
  • epidemz.net
  • erepublik.com
  • ero-advertising.com
  • ethnos.gr
  • etxt.ru
  • excellentbux.net
  • expatriates.com
  • experts-exchange.com
  • explosm.net
  • express.com.pk
  • express.pk
  • extabit.com
  • extratorrent.cc
  • extratorrent.com
  • eyny.com
  • ezilon.com
  • eztv.it
  • fabthemes.com
  • fakenamegenerator.com
  • fakku.net
  • fanpop.com
  • fansided.com
  • fansshare.com
  • fanswong.com
  • fantasy8.com
  • fap.to
  • fatakat.com
  • feedio.net
  • feedly.com
  • fenopy.se
  • ffffound.com
  • filecloud.io
  • filelist.ro
  • filenuke.com
  • filesfetcher.com
  • filgoal.com
  • filmey.com
  • filmifullizle.com
  • fishki.net
  • fiverr.com
  • fok.nl
  • fontspace.com
  • forbes.ru
  • forex4you.org
  • forexpeacearmy.com
  • forgifs.com
  • foro20.com
  • foroactivo.com
  • forobeta.com
  • forocoches.com
  • forosdelweb.com
  • forumactif.com
  • forumactif.org
  • forum.hr
  • forumophilia.com
  • forumotion.com
  • fotka.pl
  • fotolog.net
  • foundationapi.com
  • fragrantica.com
  • frandroid.com
  • freakshare.com
  • freekaamaal.com
  • freelanceswitch.com
  • freeonlinegames.com
  • freepatriot.org
  • freepornvs.com
  • free-press-release.com
  • free-tv-video-online.me
  • freewebs.com
  • freshdesignweb.com
  • fresherslive.com
  • frmtr.com
  • frombar.com
  • fsiblog.com
  • fssnet.co.in
  • fuckbooknet.net
  • fullhdfilmizle.org
  • fun698.com
  • funnyjunk.com
  • funnymama.com
  • fuskator.com
  • futhead.com
  • fux.com
  • gaaks.com
  • game321.com
  • gameblog.fr
  • game-debate.com
  • gamefront.com
  • gamer.com.tw
  • games.la
  • gamestorrents.com
  • gametracker.com
  • gamevicio.com
  • gamme.com.tw
  • geenstijl.nl
  • genteflow.com
  • geo.tv
  • getbootstrap.com
  • getcashforsurveys.com
  • getfireshot.com
  • getglue.com
  • gezginler.net
  • gezinti.com
  • gfxtra.com
  • gfy.com
  • ghanaweb.com
  • ghost.org
  • gigaom.com
  • gigporno.com
  • gistmania.com
  • glassdoor.com
  • globalewallet.com
  • globovision.com
  • gmane.org
  • godvine.com
  • gofuckbiz.com
  • gogoanime.com
  • goldenline.pl
  • goldesel.to
  • goldporntube.com
  • goldprice.org
  • gooddrama.net
  • good.is
  • goodsearch.com
  • gossiplankanews.com
  • gottabemobile.com
  • graaam.com
  • grasscity.com
  • greenwichmeantime.com
  • grindtv.com
  • gsmhosting.com
  • gsmspain.com
  • gtaforums.com
  • gulli.com
  • gun.az
  • gyazo.com
  • h2porn.com
  • hackforums.net
  • haivl.com
  • haivl.tv
  • hamariweb.com
  • hammihan.com
  • haqqin.az
  • hardsextube.com
  • hardwareluxx.de
  • hawamer.com
  • hawkhost.com
  • hayah.cc
  • hdfcbank.com
  • healthkart.com
  • heavy-r.com
  • hespress.com
  • hibapress.com
  • hightrafficacademy.com
  • hihi2.com
  • hiphopdx.com
  • hir.ma
  • hitleap.com
  • hizliresim.com
  • hkgolden.com
  • hobbyking.com
  • hockeysfuture.com
  • holiday-weather.com
  • hostgator.com.br
  • hostgator.in
  • hostingflame.org
  • hotair.com
  • hotarabchat.com
  • hotfrog.com
  • hottube.me
  • hotukdeals.com
  • howtoforge.com
  • hubpages.com
  • hugedomains.com
  • hugefiles.net
  • humblebundle.com
  • humoron.com
  • hvg.hu
  • icefilms.info
  • iconarchive.com
  • identi.li
  • idlebrain.com
  • iitv.info
  • ijreview.com
  • ikman.lk
  • ilbe.com
  • ilyke.net
  • imagecurl.org
  • imageporter.com
  • imagetwist.com
  • imgchili.com
  • imgchili.net
  • imgdino.com
  • imgserve.net
  • imgtiger.com
  • imore.com
  • impiego24.it
  • inbound.org
  • index.hr
  • index-of-mp3s.com
  • india-forums.com
  • indiafreestuff.in
  • indiangilma.com
  • indianpornvideos.com
  • indiansexstories.net
  • indowebster.com
  • inews.gr
  • infibeam.com
  • infolinks.com
  • informationng.com
  • informe21.com
  • inkedmag.com
  • inlinkz.com
  • inquirer.net
  • insight.ly
  • instantcheckmate.com
  • intercambiosvirtuales.org
  • intereconomia.com
  • internethaber.com
  • interpals.net
  • ioffer.com
  • iol.co.za
  • iphoneogram.com
  • iphones.ru
  • ipiccy.com
  • iptorrents.com
  • islammemo.cc
  • italiafilm.tv
  • it-ebooks.info
  • ittefaq.com.bd
  • ixl.com
  • jagobd.com
  • jang.com.pk
  • javascript.ru
  • jeanmarcmorandini.com
  • j.gs
  • jne.co.id
  • joemonster.org
  • johnchow.com
  • jonloomer.com
  • joomla.fr
  • joomlart.com
  • joomshaper.com
  • jotform.com
  • jquery.com
  • jquerymobile.com
  • jqueryui.com
  • jusbrasil.com.br
  • justunfollow.com
  • jutarnji.hr
  • jvzoo.com
  • kaban.tv
  • kalahari.com
  • kanui.com.br
  • karnaval.com
  • katproxy.com
  • keep2share.cc
  • khabarfarsi.com
  • khmerload.com
  • kingworldnews.com
  • kinogo.net
  • kinox.to
  • kinozal.tv
  • kleiderkreisel.de
  • klicktel.de
  • klix.ba
  • kn3.net
  • komikid.com
  • korabia.com
  • kora-online.tv
  • korben.info
  • krucil.net
  • ktonanovenkogo.ru
  • kure.tv
  • kwejk.pl
  • lankacnews.com
  • lapatilla.com
  • laravel.com
  • largeporntube.com
  • latribune.fr
  • laughingsquid.com
  • layalina.com
  • lebuteur.com
  • legiaodosherois.com.br
  • lenskart.com
  • levelup.com
  • lewrockwell.com
  • libertagia.com
  • life.com.tw
  • light-dark.net
  • liilas.com
  • lik.cl
  • like4like.org
  • likesasap.com
  • likes.com
  • limetorrents.com
  • linkbucks.com
  • linkcollider.com
  • linkconnector.com
  • linkcrypt.ws
  • linksmanagement.com
  • listcovery.com
  • listverse.com
  • livememe.com
  • lolinez.com
  • lolnexus.com
  • looti.net
  • lumfile.com
  • m5zn.com
  • mafiashare.net
  • makeameme.org
  • makeupandbeauty.com
  • makezine.com
  • malaysiakini.com
  • malwaretips.com
  • managewp.com
  • mangafox.me
  • mangahere.com
  • mangapanda.com
  • mangareader.net
  • mangastream.com
  • manoto1.com
  • maplestage.com
  • marathonbet.com
  • marketglory.com
  • marunadanmalayali.com
  • matchesfashion.com
  • mathsisfun.com
  • matthewwoodward.co.uk
  • maultalk.com
  • maxicep.com
  • mazika2day.com
  • mediapart.fr
  • mediatakeout.com
  • mediatraffic.com
  • medium.com
  • megashare.info
  • members.webs.com
  • memecenter.com
  • memedad.com
  • meme-lol.com
  • menshealth.com
  • merca20.com
  • mforos.com
  • mg.co.za
  • micromaxinfo.com
  • microworkers.com
  • mindmeister.com
  • mindtools.com
  • minecraftforum.net
  • minijuegos.com
  • minutebuzz.com
  • mitbbs.com
  • mixcloud.com
  • mixedmartialarts.com
  • mkyong.com
  • mmo-champion.com
  • mobafire.com
  • mobilism.org
  • moddb.com
  • moneymakergroup.com
  • monova.org
  • moodle.org
  • morguefile.com
  • moveon.org
  • movie4k.to
  • movie-blog.org
  • movieweb.com
  • mp3skull.com
  • mp3xd.com
  • mstaml.com
  • musavat.com
  • mybb.com
  • mybroadband.co.za
  • mydealz.de
  • mydigitallife.info
  • myegy.com
  • mygully.com
  • mylikes.com
  • mymodernmet.com
  • mynewsdesk.com
  • myorderbox.com
  • mysavings.com
  • mysmartprice.com
  • myvidster.com
  • n4g.com
  • n4hr.com
  • naijapals.com
  • naij.com
  • nairaland.com
  • namepros.com
  • naosalvo.com.br
  • nationalreview.com
  • natunbarta.com
  • ncrypt.in
  • neswangy.net
  • netbarg.com
  • network-tools.com
  • newgrounds.com
  • news.am
  • newtvworld.com
  • nexusmods.com
  • nguoiduatin.vn
  • nicozon.net
  • ninisite.com
  • niusnews.com
  • nmisr.com
  • nodejs.org
  • notdoppler.com
  • notebookcheck.net
  • noticiaaldia.com
  • noticierodigital.com
  • novafile.com
  • nowgamez.com
  • nrc.nl
  • nuevoloquo.com
  • nulled.cc
  • nullrefer.com
  • nur.kz
  • nyaa.se
  • ocioso.com.br
  • odesk.com
  • offervault.com
  • ofreegames.com
  • ojooo.com
  • omegle.com
  • on.cc
  • onedio.com
  • onlinekhabar.com
  • onlinesoccermanager.com
  • online-stopwatch.com
  • oodle.com
  • opencart.com
  • openclassrooms.com
  • opensubtitles.org
  • opinionlab.com
  • opposingviews.com
  • optimizepress.com
  • optionbit.com
  • orgasmatrix.com
  • osdir.com
  • pagina12.com.ar
  • pandodaily.com
  • paperblog.com
  • pastebin.com
  • patient.co.uk
  • paxum.com
  • pbagora.com.br
  • pcadvisor.co.uk
  • pccomponentes.com
  • pcgames.de
  • pcgameshardware.de
  • pcinpact.com
  • pdfonline.com
  • peb.pl
  • peerfly.com
  • peliculas4.com
  • peliculasyonkis.com
  • penguinvids.com
  • penny-arcade.com
  • persiantools.com
  • petapixel.com
  • phimvang.com
  • phpbb.com
  • picstopin.com
  • pijamasurf.com
  • pik.ba
  • pimpandhost.com
  • pingdom.com
  • pirateproxy.net
  • pirateproxy.se
  • piratestreaming.tv
  • pixhost.org
  • pjmedia.com
  • planetminecraft.com
  • played.to
  • playvid.com
  • playxn.com
  • plugrush.com
  • plus28.com
  • popcash.net
  • poringa.net
  • pornbb.org
  • pornerbros.com
  • pornper.com
  • porntube.com
  • porntubevidz.com
  • pornup.me
  • portalnet.cl
  • postplanner.com
  • prefiles.com
  • premiere.fr
  • premiumwp.com
  • prevention.com
  • primewire.ag
  • privatehomeclips.com
  • priyo.com
  • prlog.ru
  • prntscr.com
  • problogger.net
  • proboards.com
  • proceso.com.mx
  • promiflash.de
  • promptfile.com
  • propakistani.pk
  • proprofs.com
  • psychcentral.com
  • ptt.cc
  • pubdirecte.com
  • publika.az
  • puls24.mk
  • punchng.com
  • purpleporno.com
  • putlocker.bz
  • putlocker.com
  • putlocker.ws
  • puu.sh
  • q8yat.com
  • qafqazinfo.az
  • q-ask.com
  • qatarliving.com
  • qaynar.info
  • q.gs
  • questionablecontent.net
  • r10.net
  • racing-games.com
  • radiojavan.com
  • rahnama.com
  • random.org
  • ranker.com
  • rapgenius.com
  • rapradar.com
  • rassd.com
  • raventools.com
  • rawstory.com
  • reactiongifs.com
  • readms.com
  • realfarmacy.com
  • realitatea.net
  • redbubble.com
  • re-direcciona.me
  • reduxmediia.com
  • relink.us
  • resellerclub.com
  • residentadvisor.net
  • rghost.ru
  • ripoffreport.com
  • robtex.com
  • rockpapershotgun.com
  • roro44.com
  • rosbalt.ru
  • rozee.pk
  • rubias19.com
  • runetki.com
  • runetki.tv
  • runnersworld.com
  • rus.ec
  • ryushare.com
  • sa.ae
  • saaid.net
  • sabq.org
  • sadistic.pl
  • saharareporters.com
  • samanyoluhaber.com
  • sankakucomplex.com
  • say7.info
  • sayidaty.net
  • scamadviser.com
  • scriptmafia.org
  • sdpnoticias.com
  • searchengines.ru
  • searchere.info
  • searchquotes.com
  • sedty.com
  • seemorgh.com
  • seenive.com
  • semprot.com
  • seneweb.com
  • seozenlaunch.com
  • sergey-mavrodi.com
  • sergeymavrodi.com
  • sergey-mavrodi-mmm.net
  • serials.ws
  • serienjunkies.org
  • series.ly
  • seriesyonkis.com
  • seriouseats.com
  • serviporno.com
  • seslisozluk.net
  • sethgodin.typepad.com
  • sexytube.me
  • shahvani.com
  • shareasale.com
  • share-links.biz
  • share-online.biz
  • sheknows.com
  • shiftdelete.net
  • shoghlanty.com
  • shorouknews.com
  • shortp.com
  • shoutmeloud.com
  • sia.az
  • siasat.pk
  • siliconrus.com
  • simplyrecipes.com
  • sinembargo.mx
  • sipse.com
  • sitedeals.nl
  • sitetalk.com
  • siyahgazete.com
  • skidrowcrack.com
  • skidrowgames.net
  • skladchik.com
  • skyscrapercity.com
  • slaati.com
  • slashfilm.com
  • slate.fr
  • slimspots.com
  • sm3na.com
  • smallbiztrends.com
  • smallseotools.com
  • smartinsights.com
  • smartpassiveincome.com
  • smartprix.com
  • smosh.com
  • snapwidget.com
  • soccermanager.com
  • soccersuck.com
  • socialadr.com
  • socialblade.com
  • socialmediabar.com
  • socialmediaexaminer.com
  • socialmediatoday.com
  • socialtriggers.com
  • softarchive.net
  • solidtrustpay.com
  • someecards.com
  • somethingawful.com
  • somuch.com
  • songlyrics.com
  • songspk.cc
  • songspk.name
  • soompi.com
  • sooperarticles.com
  • sopitas.com
  • source-wave.com
  • sourtimes.org
  • spankbang.com
  • spi0n.com
  • spin.com
  • sportcategory.com
  • sportdog.gr
  • spotscenered.info
  • sprashivai.ru
  • ssense.com
  • stadelahly.com
  • stadt-bremerhaven.de
  • stafaband.info
  • stagram.com
  • standardmedia.co.ke
  • stansberryresearch.com
  • stargazete.com
  • starsue.net
  • statcounter.com
  • statmyweb.com
  • statscrop.com
  • stepashka.com
  • stereogum.com
  • stocktwits.com
  • stopforumspam.com
  • storenvy.com
  • streamhunter.eu
  • stream-tv.me
  • stuffgate.com
  • submissionwebdirectory.com
  • subscene.com
  • subtitulos.es
  • sudaneseonline.com
  • sunmaker.com
  • super.ae
  • surveygizmo.com
  • swalif.net
  • systweak.com
  • t411.me
  • talkarcades.com
  • tamindir.com
  • taringa.net
  • taxheaven.gr
  • te3p.com
  • teamliquid.net
  • techdirt.com
  • techinasia.com
  • tech-wd.com
  • tecmundo.com.br
  • teespring.com
  • telelistas.net
  • template-help.com
  • templatemonster.com
  • tfl.gov.uk
  • tgju.org
  • th3professional.com
  • thaqafnafsak.com
  • thebump.com
  • the-bux.net
  • thedailybeast.com
  • theelevationgroup.com
  • thefrisky.com
  • thehackernews.com
  • thejournal.ie
  • theladbible.com
  • themalaysianinsider.com
  • theme-fusion.com
  • theme-junkie.com
  • themelock.com
  • themobileindian.com
  • thenationonlineng.net
  • thenews.com.pk
  • thenewstribe.com
  • thepoke.co.uk
  • theregister.co.uk
  • thestudentroom.co.uk
  • thesuperficial.com
  • thethao247.vn
  • thetoptens.com
  • theync.com
  • thingiverse.com
  • thisav.com
  • thisoldhouse.com
  • tickld.com
  • tielabs.com
  • tineye.com
  • tinhte.vn
  • tipsandtricks-hq.com
  • tmart.com
  • tn.com.ar
  • tnr.com
  • todayhumor.co.kr
  • tomshw.it
  • top-channel.tv
  • topdocumentaryfilms.com
  • topix.com
  • toprankblog.com
  • torlock.com
  • torrentbutler.eu
  • torrentcrazy.com
  • torrentday.com
  • torrentdownloads.me
  • torrentfreak.com
  • torrenthound.com
  • torrentleech.org
  • torrentreactor.net
  • torrents.net
  • townhall.com
  • tracklab101.com
  • tradetracker.com
  • trafficbroker.com
  • trafficestimate.com
  • trafficfactory.biz
  • trafficg.com
  • traidnt.net
  • tribune.com.pk
  • trndsys.co
  • trojmiasto.pl
  • trueactivist.com
  • truthaboutabs.com
  • tubeplus.me
  • tukif.com
  • tunisia-sat.com
  • tureng.com
  • tutorialzine.com
  • tutsplus.com
  • tuvaro.com
  • tvboxnow.com
  • tvrage.com
  • tv-series.me
  • tw116.com
  • twentytwowords.com
  • twitchy.com
  • typepad.com
  • udemy.com
  • uludagsozluk.com
  • unitezz.com
  • uploadboy.com
  • uppit.com
  • uptobox.com
  • usingenglish.com
  • utrace.de
  • utusan.com.my
  • uwants.com
  • vanguardngr.com
  • vavel.com
  • vcommission.com
  • vecernji.hr
  • vecteezy.com
  • vetogate.com
  • vid2c.com
  • videarn.com
  • video.az
  • videomega.tv
  • videopremium.tv
  • videoyoum7.com
  • vidspot.net
  • viralnova.com
  • vivas.fi
  • vladtv.com
  • vodly.to
  • vodonet.net
  • voetbalzone.nl
  • vozforums.com
  • vr-zone.com
  • w3resource.com
  • w4.com
  • warez-bb.org
  • warriorplus.com
  • waseet.net
  • washingtontimes.com
  • watch32.com
  • watchcartoononline.com
  • watchfreemovies.ch
  • watchseries.lt
  • watchseries-online.eu
  • wattpad.com
  • waveapps.com
  • wayn.com
  • wearehairy.com
  • webconfs.com
  • webdesignerdepot.com
  • webdesignledger.com
  • webgains.com
  • webhostbox.net
  • webhostingtalk.com
  • webmastersitesi.com
  • web-opinions.com
  • webresourcesdepot.com
  • webs.com
  • wed168.com.tw
  • wehkamp.nl
  • weknowmemes.com
  • weloveshopping.com
  • whatculture.com
  • whatismyip.com
  • whatsmyserp.com
  • whirlpool.net.au
  • whocallsme.com
  • whoishostingthis.com
  • whoismind.com
  • wikiwiki.jp
  • wiziq.com
  • wiziwig.tv
  • wjunction.com
  • wmmail.ru
  • womenshealthmag.com
  • worldtimebuddy.com
  • worldtimeserver.com
  • worthofweb.com
  • wpcentral.com
  • wpengine.com
  • wphub.com
  • wplocker.com
  • wpmu.org
  • x-art.com
  • xat.com
  • xbmc.org
  • xenforo.com
  • xxxbunker.com
  • xxxkinky.com
  • yam.com
  • yazete.com
  • yepi.com
  • yeppudaa.com
  • yeslibertin.com
  • yola.com
  • yoo7.com
  • yougetpaidfast.com
  • yougetsignal.com
  • youm7.com
  • yourbittorrent.com
  • youtradefx.com
  • youtube-mp3.org
  • yucatan.com.mx
  • yuku.com
  • z6.com
  • zakon.kz
  • zalukaj.tv
  • zamalekfans.com
  • zaman.com.tr
  • zemanta.com
  • zemtv.com
  • zenhabits.net
  • zero10.net
  • zetaboards.com
  • ziprecruiter.com
  • zone-telechargement.com
  • zoominfo.com
  • zoomit.ir
  • zurb.com
  • zwaar.net

Alexa Top 1,000 affected Armenian sites

  • 00001.am
  • 00002.am
  • 00003.am
  • 018.am
  • 028.am
  • 0853.am
  • 0932.am
  • 1000plus.am
  • 100lives.am
  • 12-01.am
  • 123movies.am
  • 1358.am
  • 1368.am
  • 168.am
  • 168finance.am
  • 1967.am
  • 1968.am
  • 1999.am
  • 1gr.am
  • 1in.am
  • 1or.am
  • 1plus1.am
  • 1tv.am
  • 24hours.am
  • 24zham.am
  • 2888.am
  • 2999.am
  • 2nd.am
  • 2rd.am
  • 3459.am
  • 360impact.am
  • 360stories.am
  • 3888.am
  • 3999.am
  • 3dl.am
  • 3w.am
  • 42.am
  • 44400.am
  • 478.am
  • 5999.am
  • 5aa.am
  • 5bb.am
  • 5cc.am
  • 5dd.am
  • 5ee.am
  • 5ff.am
  • 5gg.am
  • 5hh.am
  • 5ii.am
  • 5jj.am
  • 5kk.am
  • 5ll.am
  • 5mm.am
  • 5nn.am
  • 5oo.am
  • 5pp.am
  • 5qq.am
  • 5rr.am
  • 5ss.am
  • 5tt.am
  • 5uu.am
  • 5vv.am
  • 5ww.am
  • 5yy.am
  • 5zz.am
  • 6888.am
  • 6999.am
  • 7888.am
  • 7999.am
  • 8778.am
  • 8999.am
  • a1plus.am
  • aac.am
  • abovyanmedicalcenter.am
  • achajour.am
  • aclub.am
  • ad.am
  • addcre.am
  • addj.am
  • adnot.am
  • advocate.am
  • ae.am
  • aflam.am
  • agape.am
  • air.am
  • airof.am
  • aix.am
  • ako.am
  • akronconsulting.am
  • alic.am
  • allforyou.am
  • alphastre.am
  • amb.am
  • amg.am
  • amin.am
  • amstagr.am
  • analytics.am
  • angus.am
  • ankakh.am
  • ansari.am
  • antar.am
  • antaram.am
  • aparik.am
  • araratfood.am
  • araratfruit.am
  • araratresort.am
  • aravot.am
  • ardean.am
  • argos.am
  • ariarealty.am
  • arjuk.am
  • armauthor.am
  • armchess.am
  • armcongress.am
  • armday.am
  • armdiving.am
  • armed.am
  • armeniainsurance.am
  • armenianmusic.am
  • armeniantreasury.am
  • armeniantv.am
  • armeniatv.am
  • armenpress.am
  • armfootball.am
  • armhydroproject.am
  • arminfocenter.am
  • armla.am
  • armlaw.am
  • armlottery.am
  • armlur.am
  • armnewstv.am
  • armradio.am
  • armsport.am
  • armtv.am
  • arome.am
  • arradio.am
  • artsakh-karabakh.am
  • artsakhpress.am
  • as-net.am
  • asyaararat.am
  • attorneys.am
  • audiobook.am
  • autocom.am
  • avproduction.am
  • avtopahestamaser.am
  • avtoremont.am
  • ayla.am
  • ayocard.am
  • aysor.am
  • b4b.am
  • bad.am
  • banak.am
  • baricard.am
  • barometer.am
  • barrister.am
  • batr.am
  • bee.am
  • beec.am
  • beehoney.am
  • beerhouse.am
  • befree.am
  • benjaminfrankin.am
  • bestcard.am
  • bestoffer.am
  • bestpresident.am
  • bestshin.am
  • betastre.am
  • biella.am
  • bigben.am
  • biking.am
  • bing.am
  • bjishk.am
  • bjorkst.am
  • blast.am
  • blognews.am
  • blot.am
  • boerse.am
  • bolt.am
  • bonduelle.am
  • bookmaker-ratings.am
  • books.am
  • boon.am
  • bradex.am
  • bride.am
  • bubble.am
  • bun.am
  • bzhishk.am
  • cardiogr.am
  • castanet.am
  • centaur.am
  • centraltour.am
  • chabad.am
  • chamich.am
  • chanson.am
  • cheaptravel.am
  • chess.am
  • chessschool.am
  • chessworld.am
  • chicago.am
  • chicane.am
  • civilnet.am
  • civilvoice.am
  • clima.am
  • clothing.am
  • clubyerevanmall.am
  • codecenter.am
  • comeonandsl.am
  • cord.am
  • cornerstone.am
  • cousine.am
  • cprte.am
  • crafty.am
  • createch.am
  • creditcard.am
  • crumbs.am
  • crypt.am
  • dad.am
  • daho.am
  • dasaran.am
  • davoodian.am
  • deputat.am
  • designj.am
  • dev.am
  • df.am
  • diamondhousehotel.am
  • digitalconsult.am
  • diltour.am
  • discodre.am
  • doctor.am
  • dorian.am
  • dvr.am
  • dynamics365.am
  • e-academy.am
  • e-draft.am
  • eacademy.am
  • earlybird.am
  • echocardiogr.am
  • echr.am
  • econews.am
  • eiva.am
  • elaket.am
  • eldorado.am
  • electra.am
  • electronicsplanet.am
  • elitecar.am
  • ell.am
  • elq.am
  • enfiajyan.am
  • epress.am
  • erevannews.am
  • ermenihaber.am
  • escorts.am
  • eurovision.am
  • f5.am
  • fastinfo.am
  • faz.am
  • fd-jcb.am
  • fd-motors.am
  • fifth.am
  • finca.am
  • fiore.am
  • firstmortgage.am
  • fitnesscook.am
  • fitnessfood.am
  • fizmat.am
  • fm107.am
  • fnews.am
  • foi.am
  • followme.am
  • fortunatour.am
  • fotonews.am
  • foundingparliament.am
  • foxygr.am
  • free-zone.am
  • freezone.am
  • frezone.am
  • ftn.am
  • ftp.am
  • fuli.am
  • fullste.am
  • futuretour.am
  • fvg.am
  • fw.am
  • g2a.am
  • geedo.am
  • genacvale.am
  • genocide.am
  • getex.am
  • gfrz.am
  • gh.am
  • ghukasyan.am
  • gigs.am
  • givemeinfo.am
  • giwa.am
  • gle.am
  • globalcredit.am
  • globaltv.am
  • globaudit.am
  • globnews.am
  • goodwinbet.am
  • gosmart.am
  • gotogo.am
  • govtravel.am
  • grandcandy.am
  • green-card.am
  • greencard.am
  • greencart.am
  • grh.am
  • grimgr.am
  • groupon.am
  • gss.am
  • gurman.am
  • h1.am
  • habbo.am
  • haiastan.am
  • halep.am
  • hamex.am
  • hann.am
  • hayagitaran.am
  • hayastan.am
  • hayatour.am
  • hayeli.am
  • hayerov.am
  • haymayrer.am
  • haymedia.am
  • hayojax.am
  • hell.am
  • hetq.am
  • heyi.am
  • hhhh.am
  • hhnews.am
  • himnadir.am
  • hive.am
  • horovel.am
  • hoss.am
  • hot.am
  • hotelgrig.am
  • hraparak.am
  • hscloud.am
  • ht.am
  • hush.am
  • hyaluronix.am
  • hyperbe.am
  • icar.am
  • icars.am
  • icook.am
  • idcarmenia.am
  • idea.am
  • idealsolutions.am
  • igrotech.am
  • ik.am
  • ilg.am
  • illuminati.am
  • iloft.am
  • ilur.am
  • impress.am
  • impuls.am
  • independence.am
  • independentlandscape.am
  • infoexpert.am
  • infogroup.am
  • infoleader.am
  • informacia.am
  • ing.am
  • inna.am
  • innogr.am
  • intaxcdn.am
  • intertime.am
  • investor.am
  • ios-cdn.am
  • iqsoft.am
  • irest.am
  • is-who-i.am
  • istore.am
  • isuzuarmenia.am
  • itm.am
  • itmarketing.am
  • itsec.am
  • iworks.am
  • izi.am
  • izitv.am
  • jako.am
  • james.am
  • jessup.am
  • jew.am
  • joblist.am
  • jonmarriess.am
  • jva.am
  • kamoblog.am
  • kat.am
  • katik.am
  • kaymu.am
  • kesgin.am
  • khair.am
  • khan.am
  • kickstart.am
  • kidsclub.am
  • kinggarden.am
  • kinox.am
  • kissfm.am
  • kivera.am
  • klaraplaza.am
  • koka.am
  • kolba.am
  • kolgotki.am
  • kristmarukyan.am
  • kursayin.am
  • kyokushin.am
  • la.am
  • lagalleria.am
  • lamansh.am
  • lamfl.am
  • lavradio.am
  • lawfirm.am
  • lawfirms.am
  • lawfoundation.am
  • lawyer.am
  • lcg.am
  • ldj.am
  • leader-f.am
  • legalaid.am
  • legalalliance.am
  • legallab.am
  • lessons.am
  • letmewatchthis.am
  • liferay.am
  • linatravel.am
  • linguarium.am
  • list.am
  • litan.am
  • litesoft.am
  • livethedre.am
  • livingthedre.am
  • logbook.am
  • lool.am
  • loveyou.am
  • lratvakan.am
  • luckyterminal.am
  • luxtravel.am
  • lydianarmenia.am
  • macau.am
  • magr.am
  • make.am
  • mamul.am
  • maqur.am
  • marshaltour.am
  • martin.am
  • maryparfum.am
  • maryparfume.am
  • maryperfume.am
  • masivmall.am
  • maxarts.am
  • mayerarmenia.am
  • mdv.am
  • medblog.am
  • medguide.am
  • medialab.am
  • mediamag.am
  • mediamarket.am
  • mediasystems.am
  • medindex.am
  • medlur.am
  • megamarket.am
  • megapress.am
  • mello.am
  • memori.am
  • menu.am
  • merm.am
  • merpoqrike.am
  • mersoft.am
  • mfm.am
  • midea.am
  • mikart.am
  • milemax.am
  • milena.am
  • mmmglobal.am
  • moda.am
  • moe.am
  • mom.am
  • momentum.am
  • monitor.am
  • motiontime.am
  • motors.am
  • motus.am
  • movie4k.am
  • moviegr.am
  • moviesonline.am
  • mpc.am
  • muaythai.am
  • multistre.am
  • muscle.am
  • myblog.am
  • myhands.am
  • myjeweler.am
  • mymall.am
  • myoffice.am
  • mystre.am
  • nanogr.am
  • nanonet.am
  • natfood.am
  • national-idea.am
  • navash.am
  • network-zone.am
  • newarmenia.am
  • news.am
  • news365.am
  • newsarm.am
  • newsbook.am
  • newsline.am
  • newspaper.am
  • newspapers.am
  • newspress.am
  • ngi.am
  • nikamed.am
  • nkl.am
  • nnnn.am
  • nodal.am
  • noiz.am
  • noj.am
  • noror.am
  • noyantour.am
  • npf.am
  • nurcard.am
  • nyut.am
  • odds.am
  • ogp.am
  • okidoki.am
  • oldrich.am
  • olo.am
  • olymp.am
  • onecard.am
  • onelabs.am
  • onex.am
  • onlinemall.am
  • onlinemarket.am
  • operativ.am
  • operative.am
  • orer.am
  • ory.am
  • otheryerevan.am
  • oxn.am
  • padavat.am
  • pamg.am
  • pandanews.am
  • panorama.am
  • pany.am
  • paradiplomacy.am
  • parking.am
  • partytilthe.am
  • past.am
  • pastinfo.am
  • patrontechnology.am
  • payment.am
  • pens.am
  • peso.am
  • photolure.am
  • photonews.am
  • pic.am
  • pin.am
  • pipo.am
  • pkbet.am
  • pn.am
  • point.am
  • politics.am
  • politik.am
  • ppgv.am
  • pr0gr.am
  • premium.am
  • premiumone.am
  • press.am
  • pressent.am
  • pressmedia.am
  • primecommercial.am
  • primetravel.am
  • printer.am
  • prodigy.am
  • proforma.am
  • proinfo.am
  • psychoscience.am
  • publictv.am
  • pult.am
  • putlockers.am
  • putn.am
  • pwr.am
  • pyz.am
  • qgr.am
  • quant.am
  • radioaurora.am
  • radioavrora.am
  • radiogr.am
  • radiohit.am
  • radiomarshall.am
  • rag.am
  • reading.am
  • realelections.am
  • realnews.am
  • redte.am
  • ref.am
  • revan.am
  • rewinder.am
  • rey.am
  • rickyl.am
  • rijlaarsd.am
  • ringh.am
  • rnc.am
  • roberto.am
  • rodkurtman.am
  • roth.am
  • ruben.am
  • rusradio.am
  • rust.am
  • s2s.am
  • sacvoyage-store.am
  • sah.am
  • sair.am
  • sali.am
  • salome.am
  • san.am
  • sans.am
  • savesoul.am
  • sceon.am
  • schmidt.am
  • selfie.am
  • shabat.am
  • shame.am
  • shans.am
  • shanttrading.am
  • shanttv.am
  • shelterr.am
  • short.am
  • shot.am
  • shpak.am
  • shubh.am
  • sign.am
  • silvergoldbull.am
  • singularity.am
  • sisianstone.am
  • slaq.am
  • sm.am
  • smartcenter.am
  • smartfrog.am
  • smartland.am
  • smartrest.am
  • smarttours.am
  • snund.am
  • socialcreditnetwork.am
  • solicitor.am
  • sotskiy.am
  • sounds.am
  • sovetnik.am
  • spayka.am
  • spbivesep.am
  • sports.am
  • sportstre.am
  • sporttv.am
  • spotlight.am
  • srdif.am
  • srir.am
  • ssfs.am
  • ssk.am
  • staff.am
  • state-protect.am
  • stephcunningh.am
  • stm.am
  • sub.am
  • suk.am
  • sunbet.am
  • surajr.am
  • sushisuteki.am
  • sutekisushi.am
  • swimsw.am
  • syunikonline.am
  • tahuys.am
  • taronsimonyan.am
  • tashirpizza.am
  • tatever.am
  • taxpayers.am
  • tbn.am
  • technews.am
  • techtension.am
  • tert.am
  • th.am
  • thearmenians.am
  • theburnh.am
  • thegodthati.am
  • thegr.am
  • thehayer.am
  • thoq.am
  • tickets.am
  • times.am
  • tittygr.am
  • together4armenia.am
  • tom.am
  • top-news.am
  • topcars.am
  • torrents.am
  • tort.am
  • tortik.am
  • tr.am
  • trainings.am
  • treasury.am
  • tregufo.am
  • trilogy.am
  • tru.am
  • tsirani.am
  • tstre.am
  • ttgr.am
  • ttt.am
  • tyr.am
  • umaks.am
  • unlock.am
  • urgnam.am
  • usb.am
  • vapenation.am
  • venge.am
  • venice2016.am
  • versia.am
  • vesti.am
  • vg.am
  • videolur.am
  • vin.am
  • virtual.am
  • virusnet.am
  • vito.am
  • vivarealty.am
  • vivaro.am
  • vivarobet.am
  • vivarocasino.am
  • vivaronews.am
  • vivaropoker.am
  • vlv.am
  • voip.am
  • vostan.am
  • vpn.am
  • watch32.am
  • watchfree.am
  • webdev.am
  • webing.am
  • weblink.am
  • webtv.am
  • wedding.am
  • whith.am
  • wiseconsult.am
  • wl.am
  • wnews.am
  • wol.am
  • wrg.am
  • xohanoc.am
  • xyz.am
  • yelaket.am
  • yell.am
  • yellowbook.am
  • yerevannews.am
  • yerkir.am
  • yerkirmedia.am
  • yn.am
  • yola.am
  • yyyy.am
  • zardelite.am
  • zed.am
  • zexch.am
  • zham.am
  • zhoghovurd.am
  • zinfm.am
  • zoomer.am
  • zumba.am

Summary

Check your password managers and change all your passwords, especially those on these affected sites. Renew API keys and confirm you have 2FA set up for important accounts. Due to the fact that all Cloudflare proxy customers were vulnerable to having data leaked, it's better to be safe than sorry.

References

Share this article

Comments ()