BulkFlare Pro - Cloudflare Bulk Manager

Advanced Bulk Domain Management Tool for Cloudflare with Google, Telegram, Email & Multi-Account.

BulkFlare Pro - Cloudflare Bulk Manager BulkFlare Pro is a comprehensive Chrome extension designed for webmasters, agencies, and domain portfolio managers who need to manage large numbers of domains on Cloudflare efficiently. Instead of navigating the Cloudflare dashboard one domain at a time, BulkFlare Pro gives you a unified interface to perform bulk operations across all your domains in seconds. The extension communicates directly with the Cloudflare API v4 from your browser. No data passes through any third-party server. All sensitive credentials are encrypted locally using AES-256-GCM with PBKDF2 key derivation (100,000 iterations) and stored in Chrome's local storage. CORE FEATURES Multi-Account Management Add and manage multiple Cloudflare accounts from a single interface. Each account stores a nickname, email, and Global API Key. Switch between accounts instantly from the sidebar dropdown. All API keys are encrypted with AES-256-GCM before storage. Dashboard Displays your total domain count, account email, and connection status at a glance. Quick-access buttons jump directly to Domain Manager or Import Zones. Domain Manager View all domains in a searchable table showing status (active/pending/inactive), expiration date with days-remaining countdown, DNS A records with IPs, proxy status, and bot management settings. Expiration dates are fetched from public WHOIS data, and domains expiring within 30 days are flagged. Search and filter domains in real time. Background loading keeps the UI responsive with hundreds of domains. Import Zones (Bulk Domain Add) Add multiple domains to Cloudflare at once. Enter domains one per line, set a target IP and SSL mode (Off, Flexible, Full, Full Strict), and click Start Import. Each domain is created as a zone with an A record and SSL configured. With auto-verify enabled, domains are also verified and added to Google Search Console during import. Results are sent via Telegram or Email. DNS Record Management (Single Domain) Select any domain and view its DNS records in a table with Type, Name, Content, and Proxy columns. Supports A, AAAA, CNAME, MX, TXT, SRV, CAA, NS and more. Add, edit inline, toggle proxy, or delete records with one click. Bulk DNS Upsert Add or update DNS records across multiple domains at once. Specify the record type, name, content, and TTL, then enter target domains. The extension finds existing matching records and updates them, or creates new ones. Ideal for mass IP changes or adding TXT records across your portfolio. Check IP Retrieve current A record IP addresses for multiple domains at once via the Cloudflare API. Bulk SSL Mode Update Change the SSL/TLS encryption mode (Off, Flexible, Full, Full Strict) for multiple domains at once with real-time progress. Always Use HTTPS Toggle the Always Use HTTPS setting on or off for multiple domains. Redirects all HTTP to HTTPS via 301 at the Cloudflare edge. Bot and Crawlers Management Configure two separate security settings across multiple domains in one operation. Bot Fight Mode enables Cloudflare's built-in bot detection to challenge or block automated traffic. AI Crawlers Protection controls the Browser Integrity Check setting to allow or restrict crawler access. Each setting can be independently set to Turn On, Turn Off, or Skip (leave unchanged). Note that Bot Fight Mode may require a Cloudflare Pro plan or higher. WAF Security Rules Apply predefined security rule templates to multiple domains in bulk. The extension currently includes three custom WAF rules and four managed HTTP header modifications. Custom WAF Rules: Block XMLRPC: blocks all requests to xmlrpc.php, a common attack vector for WordPress sites. Challenge WP Login: applies a Managed Challenge to wp-login.php access, adding bot protection to WordPress login pages. Challenge High Threat IPs: applies a Managed Challenge to any visitor with a Cloudflare threat score above 10, filtering potentially malicious traffic. HTTP Request Header Modifications: Add TLS Client Auth Headers: inserts TLS client authentication headers into requests. Add Visitor Location Headers: injects geolocation headers including country, IP, and coordinates. Remove Visitor IP Headers: strips visitor IP information from request headers. Add True-Client-IP Header: adds the True-Client-IP header for origin server identification. Add Leaked Credentials Check Header: enables the leaked credentials detection header. HTTP Response Header Modifications: Remove X-Powered-By Header: strips the X-Powered-By header to hide server technology. Add Security Headers: injects anti-XSS security headers into HTTP responses. Conflicting headers are automatically detected and resolved. Duplicate rules and already-enabled headers are skipped. Cache Purge Purge the entire Cloudflare cache for multiple domains at once. Useful after deploying updates across sites. Development Mode Toggle Development Mode on or off for multiple domains. Temporarily bypasses cache for up to three hours during development. Nameserver Check Verify domain NS delegation by comparing expected Cloudflare nameservers (from API) with actual public NS records (via DNS-over-HTTPS). Matched and mismatched statuses are color-coded. DNS Cleanup Delete ALL DNS records from selected domains in bulk. Supports all record types. Confirmation required before proceeding. Designed for domain migrations or resets. GOOGLE INTEGRATION Google Account Connect your Google Account via Chrome OAuth2. Scopes requested: Site Verification, Search Console, Gmail Send, and Sheets. Connect and disconnect anytime. Google Search Console Verify domain ownership and add domains to Google Search Console directly from the extension. Two verification modes are supported: URL Prefix (recommended by Google, uses https://domain/) and Domain Property (uses sc-domain:domain). For each domain, the extension performs three steps automatically. First, it requests a DNS TXT verification token from the Google Site Verification API. Second, it adds that token as a TXT record to the domain via the Cloudflare API. Third, after a brief propagation delay, it tells Google to verify the domain and then adds it to your Search Console property list. You can verify a single domain by clicking the Verify button next to it in the domain list, or use the Verify All Domains button to bulk verify every domain in your account. Each domain shows its current verification status (Verified with a green badge, Not Verified with a red badge, or a Verify button). When auto-verify is enabled, every domain added through the Import Zones tool is automatically verified and added to GSC during the import process. Google Sheets Sync Sync domain data to a Google Spreadsheet with 10 columns: Domain, Status, Expiration, IPs, Proxy, DNS Records, SSL, Dev Mode, Bot/Crawlers, Updated. Data goes to a daily tab (e.g. 2026-03-21) at the leftmost position. Smart differential sync only writes changed rows. Header is auto-formatted with colors, frozen row, and optimized column widths. Auto Sync mode syncs during daily reports. NOTIFICATIONS Telegram Send operation results and daily reports to a Telegram chat. Configure your Telegram Bot Token and Chat ID, then enable notifications. Every bulk operation (import, DNS update, SSL change, cache purge, etc.) sends a formatted summary to your Telegram chat upon completion. You can test the connection with the Send Test Message button. Email Three email delivery modes are supported. Gmail: Send emails through the Gmail API using your connected Google Account. No additional configuration needed beyond connecting your Google Account and specifying a recipient email address. SMTP: Connect to any SMTP server by providing the host, port, username, and password. When Gmail SMTP is detected (smtp.gmail.com), the extension automatically routes through the Gmail API for better Chrome extension compatibility. For SMTP2GO, it uses their HTTP API bridge. Other SMTP servers are logged with a recommendation to use Gmail or HTTP Relay mode since Chrome extensions cannot make raw TCP connections. HTTP Relay: Send emails through HTTP-based email services. Built-in support for Mailgun (Basic auth with API key), SendGrid (Bearer token auth), Resend, and any custom endpoint that accepts JSON with from, to, subject, and html fields. You can test any email configuration with the Send Test Email button. Daily Reports Schedule automated daily domain status reports. Set your preferred hour (0 to 23) and enable the daily report toggle. The extension uses Chrome's alarms API to schedule a background task that runs at the specified time each day. When the daily report fires, the background service worker fetches fresh data for every domain in your active Cloudflare account, including zone status, DNS records, IP addresses, SSL mode, bot management settings, development mode, and domain expiration via WHOIS lookup. The report is delivered through all configured notification channels simultaneously. Telegram receives a formatted text report with domain status icons, data tables, and a summary showing active count, pending count, and domains expiring soon. Email receives a fully styled HTML report with a professional table layout, color-coded status badges, and a summary footer. Google Sheets receives updated domain data in a daily tab with the same smart differential sync used in manual syncs. You can also trigger a report immediately by clicking the Send Report Now button to test your configuration without waiting for the scheduled time. USER INTERFACE Clean sidebar with 14 tools, drag-and-drop reordering. English and Vietnamese language support with instant switching. Light and dark themes. Domain selector modal with search, select-all, and filter. All form states auto-persist between sessions. Progress bars and color-coded logs for every bulk operation with a Stop button. HOW IT WORKS 1. Install BulkFlare Pro from the Chrome Web Store and click the extension icon in your toolbar. 2. Navigate to the Settings section by clicking the gear icon in the sidebar. 3. Add your Cloudflare account by entering a memorable name, your Cloudflare email, and your Global API Key. Click Save Account. Your API key is encrypted and stored locally. 4. Once connected, the Dashboard shows your account status and total domain count. 5. To manage domains, use the sidebar to navigate to any tool section. Most tools accept a list of domains (one per line) and process them with real-time progress. 6. To use Google features, go to the Google tab and click Login Google. Authorize the extension with your Google Account. 7. Configure Telegram notifications by entering your Bot Token and Chat ID in Settings. Configure Email by choosing Gmail, SMTP, or HTTP Relay mode. 8. Enable Daily Reports and set your preferred hour to receive automated domain status reports. 9. Use Import Zones to add new domains. Enable Auto-Verify to have them automatically added to Google Search Console. 10. Use Google Sheets Sync to export your domain data to a spreadsheet for reporting and record-keeping. FREQUENTLY ASKED QUESTIONS Q: Is my API key safe? A: Yes. All credentials are encrypted with AES-256-GCM (PBKDF2, 100,000 iterations, unique 12-byte IV). Data stays in Chrome local storage only. Q: Does it work with API Tokens? A: Currently uses Global API Key. Scoped API Token support is planned. Q: Can I manage multiple Cloudflare accounts? A: Yes. Add multiple accounts with separate encrypted credentials. Switch between them from the sidebar. Q: What Google permissions are needed? A: Optional. Scopes: Site Verification, Search Console, Gmail Send, and Sheets. Q: Does the daily report work when Chrome is closed? A: No. The alarm fires when Chrome next starts. Q: Is DNS Cleanup reversible? A: No. Export records first. A confirmation dialog warns before deleting. Q: What email services work with HTTP Relay? A: Mailgun, SendGrid, Resend, SMTP2GO, and any custom JSON endpoint. SUPPORT For bug reports, feature requests, or questions, contact minhvinhdao.oc@gmail.com.