Post

Just don’t try to fetch it with curl or run it in a sandbox, CloudFlare will protect the malware authors from your evil bot!

Here is the MSI it downloads: www.virustotal.com/gui/file/6f2...

Possibly hearsay, but a friend at a large CDN mentioned the company knowingly looks the other way when dealing with internet bot traffic as it contributes to a significant portion of their revenue, and there’s minimal incentive to address it. I imagine phishing infrastructure might be similar

ime there phishing, c&c, and malware did get shut down, but i didn't look much at the process the dubious "stress test for hire" sites were the thing that were left untouched, being somewhat more ambiguous

non-malicious (but not necessarily robots-compliant) bot management is a sold feature, as those can't easily be shut down at the source (like you can call OpenAI and tell them to stop but good luck)