My site (using Cloudflare) is showing aes.js challenge page

[BuddyMate123]

Turn off the Under Attack mode toggle switch and it will probably work. Tell me if it works out or not, I hope it works.

[HuyRemy]

@lovebug

ok now things just got weird

I was looking at my blank template test page on my website and found that the css wasn’t loading

So I pressed ctrl shift r to hard refresh the page but still the css is missing

Next I go to cloudflare dashboard and purge everything in the cache, ctrl shift r the test page but still the css isnt loading

Finally I open the css file in the browser and guess what I see … aes.js !!!

and…have you got any solutions? I try to use selenium to bypass but it look like sh*t

[KangJL]

@HuyRemy

I try to use selenium to bypass

Selenium with which browser?

[HuyRemy]

@KangJL

Selenium with which browser?

I use mozilla/geckodriver.

[lovebug]

I’m just going to wait for ifastnet to fix the issue

[HuyRemy]

I see the aes.js encrypt a cookie is __test and redirect user to ?i=1 with the new cookie. Then I try to automatic add that cookie but…not work. They redirect me to ?i=2 ?i=3 … ?i=55145245

May be that not a bug, you see ?

[EdwardHamHam]

@HuyRemy

I see the aes.js encrypt a cookie is __test and redirect user to ?i=1 with the new cookie.

Yes, that’s the point. It’s part of the security system. So that much is intended behavior.

Why do I see ?i=1 at the end of a URL

Don’t worry, this is normal! When you visit your website, you might notice ?i=1 added to the end of your URL. Here’s what’s happening and why. What is the ?i=1 suffix? The ?i=1 is a security check that protects your website from bots and malicious traffic. Our system needs to verify you’re using a real web browser before letting you access your site. Why does it appear? When you first visit your website, our security system: Sends a small test to your browser Checks if your browser can store…

@HuyRemy

Then I try to automatic add that cookie but…not work.

There is no need to do that, and I don’t think trying to do so will bypass the Cloudflare issues.

[HuyRemy]

I think that not a bug and ifastnet will never fix, that’s seem a mod firewall filter auto crawler bot. So…We can’t use SEO tools anymore ?

[HuyRemy]

Wow…it’s seem good and… How to download aes.js ?

[Jri-Creator]

You don’t have the ability to download the aes.js, even if you did it wouldn’t work by itself. The aes.js is a part of a multi-part bot-blocking security mechanism.

[Greenreader9]

@Jri-Creator

You don’t have the ability to download the aes.js

Of course you do! JS is executed by the browser, and if your browser has access to it, so do you.

aes.js.txt (13.4 KB)

[Jri-Creator]

You may have the ability to download and use the aes.js, you need the other parts for a full security system.

[HuyRemy]

Thanks GreenReader9 for your uploaded. But…I can’t download. Maybe have something wrong with my network.

[HuyRemy]

I’m reading aes.js, it’s look like…Can you see what I see ? My god, that’s terrible thing, so…I can’t understand any text in that file. But..take it easy, it’s good and we use it.

[Jri-Creator]

What happens if someone uploads an aes.js to their account? Would it be removed, would it be the file requested instead of the hidden aes.js? Now, I’m just wondering…

[wasik405]

The real one will still show.

[HuyRemy]

Bingoooooooo, I’ve just bypass aes successful, yesssss, it’s very nice game and I will keep secret

[Greenreader9]

That’s not bypassing it, that’s what happens when the system fails multiple times, it redirects you to that page.

[HuyRemy]

Really ? Ok, i will try again.

[EdwardHamHam]

@HuyRemy

Ok, i will try again.

I wouldn’t recommend that. InfinityFree’s terms of service state you shouldn’t try to circumvent the limitations of the service. But again, there’s no reason to in this instance. The problem is the security system’s interaction with Cloudflare, and you’re not going to solve the issue by changing things from your browser’s end.