Feature #527
openPrivacy Browser + Orbot is being blocked by CloudFlare
0%
Description
Accessing websites using Tor Browser (in both Desktop or Android version) works, but when using Privacy Browser + Orbot VPN the CloudFlare system block the access. I have changed the user-agent to match the Tor Browser user-agent, but even so it happens. I have tried with both cookies enabled and disabled. Is there anything that can be done to avoid Privacy Browser having a different fingerprint and not be blocked?
An example: tvshows4mobile.net
Sorry for the example provided, but it's the last one that I rememer having this issue in.
Files
Updated by Soren Stoutner almost 4 years ago
- File Domain For Sale.png Domain For Sale.png added
- Assignee set to Soren Stoutner
When I attempted to load tvshows4mobile.net directly (without going through Tor) to test this problem, the page initially loaded blank, because it was blocked by EasyList. After EasyList was disabled, a domain-for-sale page loaded (see screenshot). Note that the URL automatically redirected to http://ww17.tvshows4mobile.net.
Do you have a different domain that exhibits these problems I can test with?
Updated by GNU User almost 4 years ago
Hello,
I am terribly sorry, I mixed two different domains
https://mobiletvshows.net/
https://tvshows4mobile.com/
These were the correct ones. I have tried disabling all lists and still happens the same btw.
Updated by Soren Stoutner almost 4 years ago
- Priority changed from 3.x to 4.x
Cloudflare is subjecting all traffic from known Tor exit nodes to a CAPTCHA. You can verify this by using Orbot in VPN mode and trying a number of browsers (Chrome, Firefox, Lightning, FOSS Browser).
However, a year ago Cloudflare created a mechanism for the Tor Browser to automatically redirect normal URLs to .onion URLs that don't product the CAPTCHA. You can read about it here:
https://blog.cloudflare.com/cloudflare-onion-service/
There isn't anything I can do about it in Privacy Browser with the current WebView, but it would be possible to enable similar functionality in Privacy WebView in the 4.x series.