StatsMyWeb

Domain report

buf.build

buf.build ranks in the top 0.34% of domains by connectivity (Common Crawl, cc-main-2026-jul-aug-sep), with 7 distinct hosts observed under it.

Explore buf.build in the Web Graph

Connectivity

#449,317harmonic-centrality rank
Top percentile
0.34%
Hosts observed
7

From the Common Crawl cc-main-2026-jul-aug-sep hyperlink graph, 133,241,980 domains total. What this rank means

HTTPS reachability

200HTTP status

https://buf.build/ answered with HTTP 200.

DNS records

A
  • 34.95.71.106
AAAA
No records found.
MX
  • 1 aspmx.l.google.com.
  • 10 alt3.aspmx.l.google.com.
  • 10 alt4.aspmx.l.google.com.
  • 5 alt1.aspmx.l.google.com.
  • 5 alt2.aspmx.l.google.com.
NS
  • rosemary.ns.cloudflare.com.
  • tony.ns.cloudflare.com.

Live preview

Screenshot of buf.build

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since buf.build can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

Domain registration (WHOIS / RDAP)

RDAP lookup failed (HTTP 429).

How to read WHOIS and RDAP data

SSL certificate

Certificate Transparency lookup failed (HTTP 429).

How to check when a certificate expires

HTTP & security headers

Response

Server
cloudflare
Content-Type
text/html; charset=utf-8
Cache-Control
Not sent
Content-Encoding
Not sent

Security

Content-Security-Policy
base-uri 'self'; connect-src 'self' https: wss: *.g.doubleclick.net; default-src 'none'; font-src 'self' data: https:; frame-ancestors 'none'; frame-src 'self' td.doubleclick.net www.google.com www.googletagmanager.com challenges.cloudflare.com play.protovalidate.com *.hubspot.com *.hsforms.com app.termly.io; img-src 'self' https: data:; manifest-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.buf.build play.protovalidate.com cdn.usefathom.com b-code.liadm.com/lc2.js s3-us-west-2.amazonaws.com/b2bjsstore/b/ app.identitymatrix.ai *.googletagmanager.com www.googleadservices.com *.doubleclick.net *.g.doubleclick.net www.google.com www.gstatic.com js.hs-scripts.com *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com app.termly.io; style-src 'self' 'unsafe-inline' data: https:
Strict-Transport-Security
max-age=63072000; includeSubDomains
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
geolocation=(), camera=(), microphone=(), display-capture=(), fullscreen=()

What each security header does

Redirect chain

  1. 1.http://buf.build/HTTP 307

    → https://buf.build/

  2. 2.https://buf.build/HTTP 200

Meta tags

Title
Buf · Modern Protobuf and gRPC
Description
Buf is the toolchain for Protobuf, gRPC, and ConnectRPC - lint and generate code with the Buf CLI, publish and govern schemas on the Buf Schema Registry.
Canonical
https://buf.build/
Robots
Not set
Generator
Not set
Open Graph title
Buf · Modern Protobuf and gRPC
Open Graph description
Buf is the toolchain for Protobuf, gRPC, and ConnectRPC - lint and generate code with the Buf CLI, publish and govern schemas on the Buf Schema Registry.
Open Graph image
https://buf.build/images/buf-og-image-v1.png
Open Graph type
website
Twitter card
summary_large_image
Twitter title
Buf · Modern Protobuf and gRPC
Twitter image
https://buf.build/images/buf-og-image-v1.png

robots.txt

Disallow rules (User-agent: *)
3
Disallow rules (other agents)
3

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

  • Cloudflarecdn

    Server: cloudflare

  • HubSpotanalytics

    Found "js.hs-scripts.com" in the page's HTML

Similar connectivity

Domains ranked just above and below it in the same snapshot.