Page 1 of 1

CloudFlare JavaScript Detection (EasyPrivacy)

Posted: Fri Jan 19, 2024 3:25 pm
by Shri333

We found evidence of many sites using CloudFlare's JavaScript Detection service in some research work to find sites displaying ads or tracking and missed by current ad blockers (using EasyList and EasyPrivacy as ground truth). Is it possible to add a filter to block these in EasyPrivacy? It looks like EasyPrivacy already has filters for other CloudFlare services (trace, image, rum), but there is no filter for JavaScript Detection (JSD). Here are some example URLs we found (I only put 50 below, but we found thousands in our crawl):

Code: Select all

https://mediax.dscgirls.live/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://widget.clutch.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.mandinews.in/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://lmis.gov.et/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.fakexy.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://kaizengaming.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://ferrovias.com.ar/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://chatfai.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.dhakapost.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.beadsandbasics.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.first-online-banking.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://savett.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://frugalfamilyhome.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://javdb007.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://panoraven.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.routard.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://theindependentstar.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://bab.la/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://help.cytracom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://e1-card.ru/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.harapanrakyat.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://ifreeicloud.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://swwsite3.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://vgmlinks.fun/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.power.dk/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://doujindesu.tv/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.dancelifemap.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://situsrajamas.me/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://sworld3.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://inmanga.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://kabasakalonline.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://parliament.ge/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.tasteofhome.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.topmanhua.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://pusat123slot.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://123pelangi.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://rdphostings.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://258x22.life/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://blinklist.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://fall-mvp.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://258x22.live/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://tojini.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.betfair.se/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://swwsite3.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.law.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://thewalters.org/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://shamarc33.biz/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.pervmom.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
https://www.ctee.com.tw/cdn-cgi/challenge-platform/scripts/jsd/main.js

Additional context:
https://developers.cloudflare.com/funda ... -endpoint/
https://developers.cloudflare.com/bots/ ... etections/


Re: CloudFlare JavaScript Detection (EasyPrivacy)

Posted: Sat Jan 27, 2024 9:00 pm
by Nick757

the challenges are probably needed for accessing the site


Re: CloudFlare JavaScript Detection (EasyPrivacy)

Posted: Tue Feb 27, 2024 8:31 am
by fanboy

Blocking them could break the captchas