10minutemail.com
10minutemail.com <- oh no! mailinator.com and maildrop.cc too. there's guerrillamail.com and getairmail.com w/o clownflare.
131001.net
1337x.to
1broker.com
21.co 
247exchange.com
2ch.hk
3dprintingindustry.com
3dsupplyworld.com
41j.com
666surveillancesystem.com
8ch.net
99bitcoins.com
actionnetwork.org
act.oxfam.org (oxfam.org seems ok)
adamcod.es
adbusters.org
adguard.com
adminsub.net
afd-gold.de
affect3d.com
afrizap.com
aiweiwei.com
al-akhbar.com
alislam.org
al-kanz.org
allaboutcircuits.com
alphabeatic.com
alternativeto.net
alternet.org
amcharts.com
amnesty.org.au
amren.com
androidauthority.com
andy-roberts.net
anonimg.com
anonmgur.com
anonops.com
anony.ws
answersingenesis.org
anxbtc.com
anydayguide.com
apkarea.com
applicationprivacy.org
apps.evozi.com
arabnews.com
archive.today  <= that's a damn shame. We need this site to view other blocked sites. -> archive.is
arhivach.org
arkency.com
armorgames.com
arrests.org
artnet.com
artofmanliness.com
artuk.org
ashedryden.com
askamanager.org
askamanager.org <= you can't alphebetize.  "art" comes before "ask" how about we make a more durable database of clownflared sites, ..., and let computer alphabetize??
atimes.com
atlasobscura.com
atma.hr
autostraddle.com
avaaz.org <- contacted december 2015 via form (reported as tech problem), no response no response, no change
avc.com
avert.org
avpixlat.info
bad-dragon.com
barackobama.com
belgbook.be
berniesanders.com
bescherelletamere.fr
bestvpn.com
beyondchronic.com
biljoljupci.com
bitcoin.de
bitcoinist.net
bitcoin.it
bitcoinmagazine.com
bitcoinstats.com
biteasy.com
bitpay.com
bitpay.com <= torproject uses those slimeballs <https://trac.torproject.org/projects/tor/ticket/18911>
bitsharestalk.org
bizpacreview.com
blackhat.com
blockexplorer.com
blocktrail.com
blog.cloudflare.com
bloger.hr
blog.mailgun.com
blog.onahole.eu
blog.rtlwilson.com
blogs.com -  this one seems to use CloudFlare's blacklist tool - no catpcha anymore, no way to access the website "The owner of this website (blogs.com) has banned the country or region your IP address is in (TOR) from accessing this website."
bluenote.io
bookfi.org
bostonreview.net
bradleymanning.org
brain-magazine.fr
breakinggov.com
brickinstructions.com
btc-e.com
btcmarkets.net
btdigg.org
bter.com
bugmenot.com
businessinsider.com.au
buytrezor.com
buzzmachine.com
cagle.com
card-data-recovery.com
cardingmafia.ws
cashila.com
casnocha.com
catholic.com
cbj.ca
ccc.qld.gov.au - Australian (Queensland) Government site - Crime and Misdonduct Commission - charged with investigating corruption -- CloudFlare Ray ID: present - by @Bfree5150 
cdn6-blog.p2pfoundation.net (main site seems to work)
celebjihad.com
celebrity-gossip.net
celebritytypes.com
celinedion.com
celluloid.io
cem.me
centrelink.gov.au (custom CloudFlare block page)
cepr.net
cex.io
change.org (we could start a petition on change.org to ask change.org to unblock tor -  done, https://www.change.org/p/change-org-change-org-stop-using-cloudflare tweet at @jeffcliff1 for wording suggestions )
chathamhouse.org
chat.hr
chaturbate.com
chelseamanning.org
christiaanconover.com
christophercantwell.com
chronicle.su
cigionline.org
citizenfourfilm.com (really? c'mon)
citizenfourfilm.com (really? c'mon)  Snowden himself occasionally tweets links to CloudFlare, sadly enough.  He's a hero, but not exempt from criticism.. call it out when you see it.
cityam.com
cjfe.org
clarionproject.org 
classically.me
cleanfiles.net
clicanoo.re
climateatlas.ca
clojuredocs.org
cloudflare.com
cmxlog.com
codeschool.com
codinghorror.com
coinbase.com
coindesk.com
coingecko.com
coinjournal.net
coinmarketcap.com
cointelegraph.com
coinworker.com
collective-evolution.com
collectivelyconscious.net
comingle.io
conceptualrevolutions.com
conservativedailypost.com
containerops.org
coolutils.com
coshx.com
crackedlabs.org
creativecommons.org
crometeo.hr
crowarez.org
crowdfireapp.com
crowdsupply.com
cryfs.org <-- yet another software project whose authors think a domain name looks professional. no it doesn't. not if it's clownflared. then it makes you look like amateurs.
cryptocoinsnews.com
cryptocompare.com
cryptolife.net
cryptologie.net
cryptophoneaustralia.com
curiousgnu.com
currentresults.com
customize.org
cyanogenmod.org
cyberbunker.com
cyber.sci-hub.io (see above?)
dailycaller.com
dailystormer.com
damn.com
dancarlin.com
dangerousminds.net
danluu.com
daohub.org
darkreading.com
daskapital.nl
databreaches.net
davidicke.com
dazzleships.net
dcclothesline.com
decentsecurity.com <= bit disappointing twtr user @SwiftOnSecurity uses CF
decryptedmatrix.com
deepdotweb.com
defoo.org
designboom.com
desmogblog.com
devkit.co
dev-list.com
diem25.org
digitalenvelopes.email <= i'm sure I lised this already. Not sure why it disappeared.  Relisting it now.  Note that the owner denies blocking Tor, and seems uninterested in fixing the problem.
digitalfernsehen.de
digitalmunition.me
digitalocean.com
diken.com.tr
djm.org.uk
dmagazine.com
dnevnik.hr
dnevno.hr
docs.ansible.com
documentaryheaven.com
documentup.com
domino.roilipman.com
donaldjtrump.com <= rightly so!  Keep that asshole in his walled-garden with custom CloudFlare block.  Perhaps Torproject should redirect to the site with that photomosaic of cocks that produce Trumps pic :)
dontbreakourphones.org
donttrustcable.com
douglasvanbossuyt.com
downloader-apk.com
drakulastream.eu
dreamwidth.org
drmaciver.com
dwarfpool.com
e27.co
early-retirement.org <= recently joined the CF walled garden
ebooktake.in
echtlustig.com
e-demokratie.org
electronicintifada.net
elementary.io
elementaryos.org
encyclopediadramatica.se
enewspf.com
epochconverter.com
erisindustries.com
escort-canada.co
escortphonesearch.com
etherchain.org
etherfaucet.net
etproxy.top
euri.ca
evasi0n.com
eventhelix.com
exoticvps.com
expertboxing.com
explainxkcd.com
exploit-exercises.com
exploitthis.com
explosm.net
expressjs.com
extralunchmoney.com (NSFW)
extratorrent.com
eztv.ch
ezwatch.com
faithfreedom.org
fakenamegenerator.com
fakku.net
fas.org
fbi.gov (custom cloudflare block page, check source for cloudflare JS and ray ID)
feedly.com
fee.org
femdomvip.com
fightforthefuture.org
filmovita.com
flightradar24.com
floppingaces.net
foaas.com
fok.nl
fondovi.hr
foodpoisonjournal.com
forum.cyanogenmod.org
fossdroid.com
fossforce.com
fproxy.net
freeanons.org
freechelsea.com
freedomdaily.com
freedomoutpost.com
freelists.org
free.niooz.fr
freenode.net
frontpagemag.com
fteproxy.org
fuirestunepulsion.net
full-stop.net
funkyimg.com <= pic-upload.de alternative also CFd
funny-pictures-blog.com
futurism.com
fxopen.com
gapminder.org
gatesoneinstitute.org
gay.hr
gaynewsnetwork.com.au
gdssecurity.com
geek.hr
geeksided.com
geenstijl.nl
getdeb.net
gethue.com
geve.rs
ghost.org
gigahype.com
girlsjustwannahaveguns.com
gizmodo.com.au
gledajfilm.net
globalprivacywatch.com
globalresearch.ca
gnuradio.org
gocoin.com (xcfd.com outsources to gocoin.com, but transactions between the two bypass cloudflare. We should still boycott both of them)
gol.hr
gonewiththewynns.com
googlewatchblog.de
gossipcenter.com
gotnews.com
gottabemobile.com
gov1.info
gradient-animator.com
greaterfool.ca
grupoandroid.com
gsmhosting.com
gsmphonelocator.com
gulli.com
guttmacher.org
hackerboards.com
hackerone.com
hackfest.ca
hajjguide.org
hakiri.io
hamariweb.com
hanzresolver.com
happybearsoftware.com
harbourfest.ca
havelockinvestments.com 
hdz.hr
highcharts.com
historyguy.com
hitler.rocks
hldataprotection.com
hokstad.com
hookers.nl
howmanydayssincehumanityburnedawitch.com (this is brand new, there's no excuse)
howtoforge.com
hrvatskinamjestaj.hr
hs3x.com
html5boilerplate.com
humanservices.gov.au (custom CloudFlare block page)
hummingbird.me
hypergeeky.com
hypothes.is
iab.net
iamsterdam.com
ice3x.com
icetwy.re
idea.popcount.org
igreklik.com
ijreview.com
images.nrc.nl
imgflip.com
imgsking.com
importantcool.com
importantcool.net
improbable.com (maybe they should be awarded an Ig Nobel prize for it)
index.hr
infacts.org
inference.vc
infosecisland.com
intagme.com
interasistmen.se
interledger.org
internetdefenseleague.org (! - the internet/www need defending from Cloudflare!)
interserver.net
inthesetimes.com
ipazin.net
ipcc.ch
ipolitics.ca
iptorrents.eu
ipython.org
irinnews.org
is.gd
islamcity.com
islamicity.com
islamland.com
islampos.com
islamqa.info
islamswomen.com
islamtoday.net
islam-watch.org
ispace.hr
itradesecurity.com
itsfoss.com
iwilllookintoit.com
izaogledala.com
jacobinmag.com
jankarres.de
jasonsamuel.com
jaxx.io
jeanmarcmorandini.com
jekyllrb.com
jewsnews.co.il
jlm2017.fr
johnmcostaiii.net
johnpilger.com
jotform.com
jquery.com
justanswer.com
jvns.ca
kapaljka.com
kaymu.hr
kelownanow.com
kenoraonline.com
klipovito.com
klou.tt
kodi.tv
kodi.wiki
kpfk.org
kraken.com
ktetch.co.uk
kukuruku.co
kupiprodaj.net
lakeofthewoods.com
lambos.info
lapresse.ca
laprimaire.org
laravel.io
lastwordonnothing.com
latest.com
latesthackingnews.com
lawfareblog.com
lawfareblog.com <= these guys have a twitter acct and make heavy use of tinyurl links.  They need to be pressured to stop using tinyurl.
le360.ma
leagueoflegends.com
leblogdebetty.com
ledgerwallet.com
leics.police.uk
leics.police.uk (police.uk seems to work)
leitmedium.de
lennu.net
lessigforpresident.com
libertarianism.org
libertyvps.net
libraries.io
lintut.com
linustechtips.com
linuxaria.com
linuxine.com
linuxluigi.com
linuxveda.com
linuxvoice.com
livesoccertv.com
lkml.org
localbitcoins.com
localbitcoins.com (impacts ohiobitcoin.com b/c they outsource to localbitcoins.com)
localtimes.info
lockergnome.com
loomio.org
lovethesepics.com
loweringthebar.net
lzone.de
macworld.co.uk
madinamerica.com
magic999.ca
mailinator.com
mailinator.com <- oh no! 10minutemail.com too
makerbot.com
makercon.com
makezine.com
massshootingtracker.org
mcgrefer.com
meaww.com
medicare.gov.au (custom CloudFlare block page)
medium.com
meetup.com
meforum.org
meinit.nl
memecenter.com
metrocosm.com
mg.co.za
miguelmenendez.pro
mikepence.com/
mindtools.com
minilock.io
minimalistbaker.com
missionbit.com
mitvergnuegen.com
mixmag.net
mixxx.org
mmo-champion.com
mnx.io
modeling-languages.com
moquet.net
moscow.sci-hub.io (only subdomains?)
movecommons.org
moveon.org <= was tor-friendly when change.org was not, and they were praised for it. Gave no acknowledgement, then the asshats decided to use CF. Hopeless- promote their competitors instead (care2, openpetition,etc)
mpp.org
musalbas.com <- he shd know better
mygully.com
nachdenkseiten.de
nacional.hr
nadim.computer
nairaland.com
nakedcapitalism.com
namecheap.com
nationaldebtclocks.org
nationalobserver.com
nationalreview.com
nation.co.ke
naturallysuperior.com
ncsa.nationbuilder.com
nemchina.com
nesta.org.uk
netnerds.net
neurosky.com
newsbtc.com
newsfeed.ph
newsring.fr
nimportequi.com
nknews.org
nofilmschool.com
nomadcapitalist.com
notalwaysright.com
novafusion.pl
nrwz.de
nteu.org.au
nullschool.net
numer.ai
nuuktv.gl
oanda.com <= used officially by the Belgian government for FX rates for tax!  Taxpayers doing official business should not be forced to use a CloudFlare site.
obamadecides.org
ocks.org
ohjoysextoy.com
okcupid.com
okfn.org
oldpiratebay.org
ominocity.com
oneclickroot.com
oneplus.net
online-literature.com
openchain.org
opencryptoaudit.org
opendyslexic.org
openruby.com
opensecrets.org
opensourceecology.org
opentech.fund
opentechsummit.net
opentrackers.org
openvpn.net
orionlabs.co
osdir.com
outsideonline.com
overdrivedesign.biz
ovpro.nl
palemoon.org
pandawhale.com
panow.com
parade.com
passportindex.org
pastebin.com
pastebin.com <= there are copious pastebin alternatives, so promoting the alternatives is better than trying to turn pastebin
pastehtml.com (only the homepage is CloudFlared - internal pages on the same domain are not CF'd - e.g.http://pastehtml.com/view/bscbw9x5i.html) If someone knows of alternatives to pastehtml please mention them here
patreon.com
patrikagroup.in
paxful.com
pcadvisor.co.uk
pdfsdocuments.com
pdfslibmanual.com
peerio.com
pembinavalleyonline.com
pennywong.com.au
perjalananumroh.com
petitweb.fr
phantis.com
phonesdevelopers.com
pic-upload.de <= a pastebin-like site but for images. Alternative site: imgur
pingdom.com
pirateparty.org.au 
pixelbeat.org
plannedparenthood.org
playrust.com
pleated-jeans.com
pnc2017.com
pokemonshowdown.com
pokerpro.cc
politicsbreaking.com
poljoprivredni-forum.com
postimage.org <= pic-upload.de alternative also CFd
postpartumprogress.com
prado.it
preciousplastic.com
premsocks.com
pressprogress.ca
pressthink.org
prntscr.com
proceso.com.mx
procon.org
producthunt.com
profiwiki.com
programcreek.com
projectmeshnet.org
proofwoodward.org
prophan.com
proxyserver.pk
proxysite.com
proxytorrent.nl
pryrepl.org
psx-scene.com
psychcentral.com
psypost.org
pubpub.org <= some of Snowden's work is "published" on this site
puri.sm
putoholicari.com
puu.sh
pythonforengineers.com
qnrq.se
qsaudi.com
quantamagazine.org
qubes-os.org
qubes-os.org not anymore 2016/08
qwertee.com
qzzr.com
racket-lang.org
railstutorial.org
rainbowdash.net
ralsina.me
randalolson.com
randomshouting.com
ratemds.com
r-bloggers.com
reactiongifs.com
readbag.com
reader.fr
readthetpp.com 
realfarmacy.com
receive-sms-online.info
recordedfuture.com
redorbit.com
redstate.com
relishapp.com
repair.org
repl.it
republicains.fr
resetthenet.org
retrospring.net
revleft.com
rexresearch.com
richarddawkins.net
rietta.com
ripostelaique.com
rollingjubilee.org
rosettacode.org
rosstraining.com
roughguides.com
rtlnieuws.nl
s30.postimg.org
sachachua.com
sadlock.org
sagemath.com
samuel-warde.com
sanktionsfrei.de
santoku-linux.com
sapunice.net
saskndp.ca
saskparty.com
savenetneutrality.eu <= embarrassing!
sayzlim.net
sciencealert.com
scienceandnonduality.com
sckt.co
search-id.com
security.nl
seebitcoin.com
semicomplete.com
seqanswers.com
serijex.com
setimes.com
shapeshift.io <= bitcoin exchange. We should be publicly ridculing bitcoin companies that use CloudFlare because people's money is at risk (exposed to MitM).  The danger w/btc over CloudFlare is substantial.
shark-tank.com
shodanhq.com
shodan.io
shoeboxed.com
shopperapproved.com
showstudio.com
simonsfoundation.org
simplefx.com
simplejustice.us
sistani.org
sivers.org
skresolver.com
slate.fr
slaveryfootprint.org
slike.com
slock.it
smartinsights.com
sminkerica.com
smspuppy.com
snip.ly
socks-proxy.net
soompi.com
soshified.com
soundsofblm.com
spaceappschallenge.org
spinroot.com
splcenter.org
sprotyv.info
sskaje.me
start.1password.com (just signup, not the whole site, breaks signup via Tor)
startjoin.com
state.io
stevens.edu
stopthecap.com
strawpoll.me
stuffdutchpeoplelike.com
suborbital-systems.net
sunnahonline.com
swft.so (swiftsocial.com URL shortener)
swiftsocial.com
swiss-miss.com
syllable.org
symmetrymagazine.org
t24.com.tr
t411.in
tafttest.com
talkmoneycafe.com
taoofmac.com
tarnkappe.info
tcf.org
tecadmin.net
techbeasts.com
techdirt.com WILL WHITELIST SOON
techdirt.com WILL WHITELIST SOON <= it's whitelisted now. And it's a fuckin' shame b/c it's harder for Tor users to know to boycott them. It's harder to pressure a site to abandon CloudFlare when they know of the whitelisting option.  Not good that they will now continue to feed the CloudFlare monster.
technott.com
techraptor.net
tech-recipes.com
teespring.com
telegraphindia.com
teradown.com
tert.am
testandverification.com
textfiles.com (not a cloudflare site itself, but many of the mirror links at the top of the page are CloudFlare sites).  The owner's philosophy suggests he would oppose CloudFlare if informed about it.
textopus.nl
theahafoundation.org
thebronasium.com
theden.tv
the-digital-reader.com
thediplomat.com
thedroidguy.com
theexmuslim.com
thefappening.so
thefreethoughtproject.com
thehackernews.com
theinfosphere.org
theislamicnews.com
thejuicemedia.com
thelastamericanvagabond.com
thelawdictionary.org
thelinuxdaily.com
thelongandshort.org
themanual.org
themerkle.com
themighty.com
themindunleashed.org
thenubbyadmin.com
theodi.org
the-orbit.net
thepiratebay.se
theplaidzebra.com
theprice2016.xyz
therealstanlee.com
theregister.co.uk (Please turn JavaScript on and reload the page. 2016/03)
therightstuff.biz
thesouthafrican.com
thestack.com
theswiftcodes.com
thetrendythings.com
theturkishsun.com
thewalrus.ca
thewinnower.com
thingiverse.com
thinkpol.ca
thisiscolossal.com
threatbutt.com
thunderbaylive.com
tickld.com
tinyhack.com
tinyurl.com
t-nation.com
todayszaman.com
topix.com
tor.com
torontocrypto.org
torrentr.eu
tpo.nl
trackingterrorism.org
transferwise.com
tronixstuff.com
trustmeimascientist.com
tunnelbear.com
turnkeylinux.org
tutsplus.com
twib.in
ubitquity.io
ultraimg.com <= pic-upload.de alternative also CFd
ummah.com
unhypem.com
unixmen.com
uphold.com
upwork.com
urbanist-magazin.de
urbit.org
urlsinfo.com
usafreedom.fail
usbccompliant.com
uservoice.com
u-s-history.com
usinenouvelle.com
usklicnik.com
utopia.de
vancouverobserver.com
vessenes.com
viget.com
viralthread.com
voat.co
voedzo.nl
vulnsec.com
waitbutwhy.com
washingtoninstitute.org
watchseries.ag
weaponsofmassdeception.org
weasyl.com
webinspector.se
webmajstori.net
webrtchacks.com
websta.me
webwiki.com
whatismyip.com
whirlpool.net.au
whois.de
whoismcafee.com
whois-search.com
whois.vu
wiki.cyanogenmod.org
wikiislam.net
wikileaksparty.org.au
wiki.tcl.tk
wiki.tcl.tk <= they claim CF is used so they don't have to clean up spam. They also say no one else complains about the Tor block.
willshouse.com
wireshark.org
without-systemd.org
worldofislam.info
wrongisland.org
www.sciencebasedmedicine.org
xato.net
xda-university.com
xda-university.com <= the mods abuse their power on xda-developers.com to a great extent. With censorship rampant, there's little hope for them. Better to promote usenet group comp.mobile.android instead +1 you can't even discuss the format used to store IMEI there. a board where the powers that be have that much influence is no damn good
yatse.tv
yohost.org
yourbittorrent.com
zadovoljna.hr
zcomm.org
zdziarski.com
zell-weekeat.com
zenmate.com
zeropaid.com
znanost.com
zoominfo.com
ztrela.com