# My site (using Cloudflare) is showing aes.js challenge page

**URL:** <https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501>\
**Category:** Hosting Support\
**Created:** [January 16, 2025, 7:09am UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501 "2025-01-16T07:09:41Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![BuddyMate123](https://forum.infinityfree.com/letter_avatar/buddymate123/32/6_22734026db12803ebb3e059622ac3534.png) [@BuddyMate123](https://forum.infinityfree.com/u/BuddyMate123)\
**Post date:** [January 18, 2025, 4:47am UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/21 "2025-01-18T04:47:33Z")

</div>

Turn off the Under Attack mode toggle switch and it will probably work. Tell me if it works out or not, I hope it works.

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 18, 2025, 4:19pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/22 "2025-01-18T16:19:28Z")

</div>

> [@lovebug](#):
>
> ok now things just got weird
> 
> I was looking at my [blank template test page](https://lovebyte.eu.org/?page=blank-template) on my website and found that the css wasn’t loading
> 
> So I pressed ctrl shift r to hard refresh the page but still the css is missing
> 
> Next I go to cloudflare dashboard and purge everything in the cache, ctrl shift r the test page but still the css isnt loading
> 
> Finally I open the [css file](https://lovebyte.eu.org/lovebug.css) in the browser and guess what I see … **aes.js**!!!

and…have you got any solutions? I try to use selenium to bypass but it look like sh\*t

 ![image](https://forum-cdn.infinityfree.net/original/3X/c/e/ce364f3bc904cdb074f7833a18c85c2155a09e08.png)

---

<div class="post-metadata">

**Author:** ![KangJL](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/kangjl/32/12130_2.png) [@KangJL](https://forum.infinityfree.com/u/KangJL)\
**Post date:** [January 18, 2025, 4:38pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/23 "2025-01-18T16:38:03Z")

</div>

> [@HuyRemy](#):
>
> I try to use selenium to bypass

Selenium with which browser?

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 18, 2025, 4:55pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/24 "2025-01-18T16:55:35Z")

</div>

> [@KangJL](#):
>
> Selenium with which browser?

I use mozilla/geckodriver.

---

<div class="post-metadata">

**Author:** ![lovebug](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/lovebug/32/57624_2.png) [@lovebug](https://forum.infinityfree.com/u/lovebug)\
**Post date:** [January 18, 2025, 5:59pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/25 "2025-01-18T17:59:30Z")

</div>

I’m just going to wait for ifastnet to fix the issue

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 18, 2025, 8:05pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/26 "2025-01-18T20:05:41Z")

</div>

I see the aes.js encrypt a cookie is \_\_test and redirect user to ?i=1 with the new cookie. Then I try to automatic add that cookie but…not work. They redirect me to ?i=2 ?i=3 … ?i=55145245 😑

 ![image](https://forum-cdn.infinityfree.net/original/3X/5/5/558e2f02c12504867c128d8f6a71edac0b6396ed.png)

May be that not a bug, you see ?

---

<div class="post-metadata">

**Author:** ![EdwardSkunk](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/edwardskunk/32/66982_2.png) [@EdwardSkunk](https://forum.infinityfree.com/u/EdwardSkunk)\
**Post date:** [January 18, 2025, 8:08pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/27 "2025-01-18T20:08:44Z")

</div>

> [@HuyRemy](#):
>
> I see the aes.js encrypt a cookie is \_\_test and redirect user to ?i=1 with the new cookie.

Yes, that’s the point. It’s part of the security system. So that much is intended behavior.

> [@Why do I see ?i=1 at the end of a URL](https://forum.infinityfree.com/docs?topic=49356):
>
> Don’t worry, this is normal! When you visit your website, you might notice ?i=1 added to the end of your URL. Here’s what’s happening and why. What is the ?i=1 suffix? The ?i=1 is a security check that protects your website from bots and malicious traffic. Our system needs to verify you’re using a real web browser before letting you access your site. Why does it appear? When you first visit your website, our security system: Sends a small test to your browser Checks if your browser can store…

> [@HuyRemy](#):
>
> Then I try to automatic add that cookie but…not work.

There is no need to do that, and I don’t think trying to do so will bypass the Cloudflare issues.

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 18, 2025, 8:09pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/28 "2025-01-18T20:09:59Z")

</div>

I think that not a bug and ifastnet will never fix, that’s seem a mod firewall filter auto crawler bot. So…We can’t use SEO tools anymore ?

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 18, 2025, 8:59pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/29 "2025-01-18T20:59:01Z")

</div>

Wow…it’s seem good and… How to download aes.js ?

---

<div class="post-metadata">

**Author:** ![Jri-Creator](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/jri-creator/32/65654_2.png) [@Jri-Creator](https://forum.infinityfree.com/u/Jri-Creator)\
**Post date:** [January 18, 2025, 9:03pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/30 "2025-01-18T21:03:40Z")

</div>

You don’t have the ability to download the aes.js, even if you did it wouldn’t work by itself. The aes.js is a part of a multi-part bot-blocking security mechanism.

---

<div class="post-metadata">

**Author:** ![Greenreader9](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/greenreader9/32/22847_2.png) [@Greenreader9](https://forum.infinityfree.com/u/Greenreader9)\
**Post date:** [January 18, 2025, 9:12pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/31 "2025-01-18T21:12:00Z")

</div>

> [@Jri-Creator](#):
>
> You don’t have the ability to download the aes.js

Of course you do! JS is executed by the browser, and if your browser has access to it, so do you.

[aes.js.txt](https://forum.infinityfree.com/uploads/short-url/A5HEGeM7llkQq3rZkDryFjpRhv5.txt) (13.4 KB)

---

<div class="post-metadata">

**Author:** ![Jri-Creator](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/jri-creator/32/65654_2.png) [@Jri-Creator](https://forum.infinityfree.com/u/Jri-Creator)\
**Post date:** [January 18, 2025, 10:44pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/32 "2025-01-18T22:44:39Z")

</div>

You may have the ability to download and use the aes.js, you need the other parts for a full security system.

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 19, 2025, 2:34pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/33 "2025-01-19T14:34:56Z")

</div>

Thanks GreenReader9 for your uploaded. But…I can’t download. Maybe have something wrong with my network.

 ![image](https://forum-cdn.infinityfree.net/original/3X/f/f/ff6af6b64d25f070453567e2c216fe505b99463d.png)

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 19, 2025, 2:42pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/34 "2025-01-19T14:42:46Z")

</div>

## I’m reading aes.js, it’s look like…Can you see what I see ? My god, that’s terrible thing, so…I can’t understand any text in that file. But..take it easy, it’s good and we use it.

 ![image](https://forum-cdn.infinityfree.net/original/3X/7/9/797891d24248a6533b39a87c76666db1bef61696.png)

---

<div class="post-metadata">

**Author:** ![Jri-Creator](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/jri-creator/32/65654_2.png) [@Jri-Creator](https://forum.infinityfree.com/u/Jri-Creator)\
**Post date:** [January 19, 2025, 2:45pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/35 "2025-01-19T14:45:58Z")

</div>

What happens if someone uploads an aes.js to their account? Would it be removed, would it be the file requested instead of the hidden aes.js? Now, I’m just wondering…

---

<div class="post-metadata">

**Author:** ![wasik405](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wasik405/32/55080_2.png) [@wasik405](https://forum.infinityfree.com/u/wasik405)\
**Post date:** [January 19, 2025, 3:02pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/36 "2025-01-19T15:02:23Z")

</div>

The real one will still show.

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 19, 2025, 7:28pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/37 "2025-01-19T19:28:44Z")

</div>

Bingoooooooo, I’ve just bypass aes successful, yesssss, it’s very nice game 🤩 and I will keep secret 🥳

 ![20250120_022451](https://forum-cdn.infinityfree.net/original/3X/b/e/bea60f6b553ce14c3e548ea9411077c48ff9e45c.png)

---

<div class="post-metadata">

**Author:** ![Greenreader9](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/greenreader9/32/22847_2.png) [@Greenreader9](https://forum.infinityfree.com/u/Greenreader9)\
**Post date:** [January 19, 2025, 7:36pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/38 "2025-01-19T19:36:20Z")

</div>

That’s not bypassing it, that’s what happens when the system fails multiple times, it redirects you to that page.

---

<div class="post-metadata">

**Author:** ![HuyRemy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/huyremy/32/50664_2.png) [@HuyRemy](https://forum.infinityfree.com/u/HuyRemy)\
**Post date:** [January 19, 2025, 7:38pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/39 "2025-01-19T19:38:58Z")

</div>

Really 😱? Ok, i will try again. 😭

---

<div class="post-metadata">

**Author:** ![EdwardSkunk](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/edwardskunk/32/66982_2.png) [@EdwardSkunk](https://forum.infinityfree.com/u/EdwardSkunk)\
**Post date:** [January 19, 2025, 8:06pm UTC](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501/40 "2025-01-19T20:06:51Z")

</div>

> [@HuyRemy](#):
>
> Ok, i will try again.

I wouldn’t recommend that. InfinityFree’s [terms of service](https://www.infinityfree.com/terms/) state you shouldn’t try to circumvent the limitations of the service. But again, there’s no reason to in this instance. The problem is the security system’s interaction with Cloudflare, and you’re not going to solve the issue by changing things from your browser’s end.

[Previous page](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501.md?page=1)

[Next page](https://forum.infinityfree.com/t/my-site-using-cloudflare-is-showing-aes-js-challenge-page/104501.md?page=3)
