CloudFlare JavaScript Detection (EasyPrivacy)

[Shri333]

We found evidence of many sites using CloudFlare's JavaScript Detection service in some research work to find sites displaying ads or tracking and missed by current ad blockers (using EasyList and EasyPrivacy as ground truth). Is it possible to add a filter to block these in EasyPrivacy? It looks like EasyPrivacy already has filters for other CloudFlare services (trace, image, rum), but there is no filter for JavaScript Detection (JSD). Here are some example URLs we found (I only put 50 below, but we found thousands in our crawl):

Code: Select all

https://mediax.dscgirls.live/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://widget.clutch.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.mandinews.in/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://lmis.gov.et/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.fakexy.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://kaizengaming.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://ferrovias.com.ar/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://chatfai.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.dhakapost.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.beadsandbasics.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.first-online-banking.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://savett.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://frugalfamilyhome.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://javdb007.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://panoraven.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.routard.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://theindependentstar.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://bab.la/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://help.cytracom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://e1-card.ru/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.harapanrakyat.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://ifreeicloud.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://swwsite3.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://vgmlinks.fun/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.power.dk/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://doujindesu.tv/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.dancelifemap.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://situsrajamas.me/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://sworld3.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://inmanga.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://kabasakalonline.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://parliament.ge/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.tasteofhome.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.topmanhua.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://pusat123slot.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://123pelangi.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://rdphostings.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://258x22.life/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://blinklist.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://fall-mvp.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://258x22.live/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://tojini.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.betfair.se/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://swwsite3.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.law.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://thewalters.org/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://shamarc33.biz/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.pervmom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.ctee.com.tw/cdn-cgi/challenge-platform/scripts/jsd/main.js

Additional context:
https://developers.cloudflare.com/funda ... -endpoint/
https://developers.cloudflare.com/bots/ ... etections/

[Nick757]

the challenges are probably needed for accessing the site

[fanboy]

Blocking them could break the captchas