A collaboration to deal with The Great Cloudwall (aka Cloudflare)

termsofservice 81e494fe58 Update 'PEOPLE.md' 1 day ago
addon_chrome 4daec00186 Upload files to 'addon_chrome/whyrejectme' 5 days ago
addon_firefox cc8fb3c304 Upload files to 'addon_firefox/whyrejectme' 5 days ago
cloudflare_inc 633aff38ea Update 'cloudflare_inc/cloudflare_members.txt' 2 days ago
cloudflare_users 0b2dfbc16b Update 'cloudflare_users/cloudflare_supporter.txt' 1 day ago
globalist 820023341b Convert port to string. 4 months ago
image 6042005d13 Upload files to 'image' 2 days ago
not_cloudflare d27b65166c Access Denied 1 day ago
pdf a1b0427b85 Upload files to 'pdf' 6 days ago
split e74c9e8200 Delete 'split/cloudflare_addedbyfqdn.txt' 2 weeks ago
tool 8d435acabd Update 'tool/irssi_cf_alturl.pl' 1 week ago
LICENSE.md fe3c5f08c0 Update 'LICENSE.md' 1 week ago
NEWS.md 917f6c853f Update 'NEWS.md' 1 week ago
PEOPLE.md 81e494fe58 Update 'PEOPLE.md' 1 day ago
README.md 5e2d0da6fc revert MiTM to MITM (these are add-on name) 1 day ago
article.txt d425d2cd53 change instances of MITM to MiTM - #8 1 day ago
cloudflare-philosophy.md 2fd070bd57 Update 'cloudflare-philosophy.md' 1 month ago
faq.md 5182a63b84 Update 'faq.md' 5 months ago
history.md 39165caf10 Update 'history.md' 7 months ago
instructions.md b3b9255f87 Update 'instructions.md' 6 days ago
instructions_git.md 37853aaa2e minor formatting fixes to git instructions 2 weeks ago
what-to-do.md 9dafbbe3ab Update 'what-to-do.md' 1 week ago

README.md

The Great Cloudwall


"The Great Cloudwall" is CloudFlare, the world's largest MITM proxy(reverse proxy). It sits between you and origin webserver, acting like a border patrol agent. The origin webserver administrator allowed the agent to decide who can access to their "web property" and define "restricted area". Take a look at the second image posted below. You will think Cloudflare block only attackers. It's not.



It is called this in reference to the Great Firewall of China which does a comparable job of filtering out many humans from seeing web content (ie everyone in mainland China and people outside) while at the same time those not affected to see a dratically different web, a web free of censorship such as an image of "tank man" and the history of "Tiananmen Square protests". (Cloudflare also block legit robots(crawlers) and API clients)



Cloudflare similarly prevents those in southeast asia and elsewhere who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP) unless they solve multiple image CAPTCHAs. There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is using them to make a browser signature.



Tor users and VPN users are also a victim of Cloudflare. If you didn't try Tor until this moment, we encourage you to download Tor Browser and visit your favorite websites. (advice: Do not login to your bank website or government webpage or they will flag your account. Use VPN for those websites.) You might want to say "Tor is illegal! Tor is criminal's browser! Tor is bad!". No. Tor was developed by US Army, but current Tor is developed by the Tor project. There are many people who use Tor, including your future friends. So, if you are using Cloudflare on your website you are blocking real humans. You will lose potential friendship and business deal.



Cloudflare also has a massive harassment problem. Cloudflare shares personal information of those who complain about hosted sites. They sometimes ask you to provide your true ID. If you don't want to get harassed, assaulted, swatted or killed, you better stay away from Cloudflared websites.



Let's talk about another harassment problem. Cloudflare is sending spam emails to non-Cloudflare users.

Only send emails to subscribers who’ve opted in.

When the user say "stop", then stop sending email.

It's that simple. But Cloudflare don't care. Cloudflare said using their service can stop all spammers or attackers. How can we stop Cloudflare spammers without activating Cloudflare?



And their DNS service, 1.1.1.1, is also filtering out users from visiting the website by returning fake IP address owned by Cloudflare, localhost IP such as "127.0.0.x", or just return nothing. Cloudflare DNS also break online software from smartphone app to computer game because of their fake DNS answer.



And here you might think, "I am not using Tor or VPN, why should I care?". If you visit website which use Cloudflare, you are sharing your information not only to website owner but also Cloudflare. It is impossible to analyze without decrypting TLS traffic. Cloudflare knows all your data such as raw password. Cloudbeed can happen anytime.



Do you really want to share your data with Cloudflare, and also 3-letter agency? Internet user's online profile is a "product" that the government and big tech companies wants to buy.

US Department of Homeland Security said:

Do you have any idea how valuable the data you have is?
Is there any way you would sell us that data?


Cloudflare also offer FREE VPN service called "Cloudflare Warp". If you use it, all your smartphone connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving all your information to Cloudflare. If you think "Are you joking? Cloudflare is secure." then you need to learn how VPN works.



You might already know about the PRISM scandal. It is true that AT&T lets NSA to copy all internet data for surveillance. Let's say you're working at the NSA, and you want every citizen's internet profile. You know most of them are blindly trusting Cloudflare and using it to proxy their personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, shopping, video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("1.1.1.1") and VPN service ("Cloudflare Warp") for "Secure! Faster! Better!" internet experience. Combining them with user's IP address, browser fingerprint, cookies and RAY-ID will be useful to build target's online profile. You want their data. What will you do?



Cloudflare is a honeypot.

Free honey for everyone. Some strings attached.

Do not use Cloudflare.

Decentralize the internet.


This repository is a list of websites that are behind "The Great Cloudwall", and also actively blocking Tor users.

Data - mirrors: NixNet, CodeBerg

Information

There are more details of why what they are doing is wrong available here. Also see Frequently Asked Questions.

What can you do?

Name Firefox Chrome
Block Cloudflare MITM Attack Code Code
Are links vulnerable to MITM? Code Code
Which website rejected me? Code Code

WTF

There are other lists, but this one is one where every entry on the list a human being has actually tried to go to, and has been blocked. Human is not a robot.

WARNING: Github.com is very hostile to Tor users. If you create an account on Github via Tor, your account will be automatically flagged for spam and will be deleted. See "List of services blocking Tor" for details.

Who uses this list?