@Lunarly
When you encounter the Cloudflare Bot Cops - use the Site-Specific Brave Shields setting to set Trackers & Ads to Standard
(when using BB for iOS) or Block trackers & ads
for other platforms - in other words, NOT leaving the Site-Specific Brave Shields setting at Aggressive
:
That step may allow the notorious Cloudflare Bot Cop (such as the Cloudflare usage of hCAPTCHA or Cloudflare Turnstile routines) to back off.
Tips regarding Brave Shields:
I have more success, with:
- Brave Shields UP
- Either Allow All Cookies or Block 3rd Party Cookies, but NOT Blocking All Cookies
- Allowing JavaScripts from specific sources, but NOT Allowing All JavaScripts
- Trackers & Ads treatment: Aggressive (at first), and then incrementally relaxing that setting
- Fingerprinting (aka footprinting) blocking: Strict (at first), and then incrementally relaxing that setting
I almost NEVER use:
- All of Brave Shields UP
- All of Brave Shields DOWN
Shields Basics
How do I configure global and site-specific Shields settings?
How do I use Shields while browsing?
Of course, be sure that the sources of cookies and JavaScripts are not blocked.
Possibly: Internet Security or Anti-Virus at play?
Maybe: An extension ← or combination of extensions, or the order in which the extensions were installed.
Excerpt from the Cloudflare link:
How does Turnstile work?
Turnstile relies primarily on “direct” bot detections, running JavaScript on the page in an attempt to detect common automation frameworks, along with some network-level traffic pattern analysis.
On compatible hardware, primarily recent iPhones, Turnstile (like hCaptcha) will also attempt “hardware attestation” to validate that a real iPhone made the request. This requires the user’s device to contact Apple’s servers for a token, which is then sent to Turnstile.
When a bot is detected, Turnstile uses “proof of work” to instruct the browser to waste computer resources, for example by executing useless code on the CPU or filling up memory in an attempt to reduce the number of requests emitted per second by each physical machine running a bot.
NOTE that last paragraph.