{"id":84118,"date":"2025-07-16T09:00:34","date_gmt":"2025-07-16T09:00:34","guid":{"rendered":"https:\/\/www.cryptocabaret.com\/?p=84118"},"modified":"2025-07-16T09:00:34","modified_gmt":"2025-07-16T09:00:34","slug":"cloudflare-starts-blocking-pirate-sites-for-uk-users-thats-a-pretty-big-deal","status":"publish","type":"post","link":"https:\/\/www.cryptocabaret.com\/?p=84118","title":{"rendered":"Cloudflare Starts Blocking Pirate Sites For UK Users \u2013 That\u2019s a Pretty Big Deal"},"content":{"rendered":"

\"cloud-dark\"Internet service providers BT, Virgin Media, Sky, TalkTalk, EE, and Plusnet account for the majority of the UK\u2019s residential internet market and as a result, blocking injunctions previously obtained at the High Court often list these companies as respondents. <\/p>\n

These so-called \u201cno fault\u2019 injunctions stopped being adversarial a long time ago; ISPs indicate in advance they won\u2019t contest a blocking order against various pirate sites, and typically that\u2019s good enough for the Court to issue an order with which they subsequently comply.<\/p>\n

For more than 15 years, this has led to blocking being carried out as close to users as possible, with ISPs\u2019 individual blocking measures doing the heavy lifting. A new wave of blocking targeting around 200 pirate site domains came into force yesterday but with the unexpected involvement of a significant new player.<\/p>\n

Cloudflare Blocks Pirate Sites \u201cFor Legal Reasons\u201d<\/h2>\n

If piracy is rampant, in the UK pirate site blocking must qualify as rampant too. In the latest wave of blocking that seems to have come into force yesterday, close to 200 pirate domains requested by the Motion Picture Association were added to one of the longest pirate site blocking lists in the world. <\/p>\n

The big change is the unexpected involvement of Cloudflare, which for some users attempting to access the domains added yesterday, displays the following notice:<\/p>\n<\/p>\n

\"Cloudflare<\/center><\/p>\n

As stated in the notice, Error 451 is returned when a domain is blocked for legal reasons, in this case reasons specific to the UK.<\/p>\n

\n

In response to a legal order, Cloudflare has taken steps to limit access to this website through Cloudflare\u2019s pass-through security and CDN services within the United Kingdom.<\/em><\/p>\n<\/blockquote>\n

Background: Cloudflare\u2019s Blocking Policy<\/h2>\n

Before we take a look at the \u2018legal order\u2019 that prompted Cloudflare to take this action, Cloudflare\u2019s blocking policy for copyright claims concerning its CDN and security services provides useful background information.<\/p>\n

\n

Because Cloudflare cannot remove content it does not host, other service providers are better positioned to address these issues. Among other things, any blocking by Cloudflare is of limited effectiveness, as a website will be accessible if it stops using Cloudflare\u2019s network. Cloudflare therefore regularly pushes back against attempts to seek blocking orders.<\/em><\/p>\n<\/blockquote>\n

Cloudflare notes that it may take steps to comply with valid orders if, among other things, \u201cprinciples relating to proportionality, due process, and transparency\u201d are upheld. <\/p>\n

Whether Cloudflare pushed back here isn\u2019t clear, but the information made available falls well short of that promised in the Error 451 notice.<\/p>\n

Semi-Transparent and Still Lacking<\/h2>\n

With no central repository of blocking orders and no legal requirement to share details of injunctions with the public, transparency in the UK is mostly left to chance. Some orders make their way online, but there is no guarantee.<\/p>\n

For those interested in finding out more about the order affecting Cloudflare, the company provides a link which promises to reveal \u201cthe party that requested it, and the authority that issued it.\u201d The link directs to the Lumen Database<\/a>, which publishes information effectively donated by companies such as Google and Cloudflare, for the purpose of improving transparency.<\/p>\n

In this case there\u2019s no indication of who requested the blocking order, or the authority that issued it. However, from experience we know that the request was made by the studios of the Motion Picture Association and for the same reason the High Court in London was the issuing authority. <\/p>\n

To the general public, the information is just a short list of domains. If it wasn\u2019t for the efforts of Lumen, Google and Cloudflare, the situation would be significantly less clear than that.<\/p>\n<\/p>\n

\"Lumen-MPA-2025-07-15\"<\/center><\/p>\n

Look more closely and further issues become apparent. According to the sender of the original notice (a law firm representing the studios), an explanation of the court order can be found in \u201cparagraph 1, paragraph 2, and Schedule 1 of the Order\u201d but where that can be found isn\u2019t made any more clear than the name of the issuing court. <\/p>\n

Then there\u2019s the date of the notice \u2013 February 22, 2024, well over a year ago \u2013 for blocking that we believe started just yesterday.<\/p>\n

Dynamic Blocking=Limited Transparency<\/h2>\n

The list of 14 domains probably relates to a High Court blocking injunction obtained by the MPA pre-February 2024, but exactly when is more difficult to say. <\/p>\n

The issue lies with dynamic injunctions; while a list of domains will appear in the original order (which may or may not be made available), when the MPA concludes that other domains that appear subsequently are linked to the same order, those can be blocked too, but the details are only rarely made public.<\/p>\n

From information obtained independently, one candidate is an original order obtained in December 2022 which requested blocking of domains with well known pirate brands including 123movies, fmovies, soap2day, hurawatch, sflix, and onionplay. This leads directly to another unusual issue.<\/p>\n

The notice linked from Cloudflare doesn\u2019t directly concern Cloudflare. The studios sent the notice to Google after Google agreed<\/a> to voluntarily remove<\/a><\/em> those domains from its search indexes, if it was provided with a copy of relevant court orders. Notices like these were supplied and the domains were deindexed, and the practice has continued ever since.<\/p>\n

That raises questions about the nature of Cloudflare\u2019s involvement here and why it links to the order sent to Google; notices sent to Cloudflare are usually submitted to Lumen by Cloudflare itself. That doesn\u2019t appear to be the case here.<\/p>\n

Partially Effective at Blocking VPNs<\/h2>\n

When blocking measures are required, Cloudflare digs in when requests concern its public DNS resolver (1.1.1.1). To achieve a similar effect, Cloudflare uses another technique instead.<\/p>\n

\n

\u201cIn countries with laws that provide for blocking access to online content, Cloudflare may geoblock websites to limit access in the relevant jurisdiction to those websites through Cloudflare\u2019s pass-through security and CDN services.\u201d<\/em><\/p>\n<\/blockquote>\n

Cloudflare appears to be using geo-blocking in the UK, as some VPN users will soon find out. In normal circumstances a VPN using a server in the UK will bypass ISP blocking no differently than a server located anywhere else in the world. Users attempting to gain access to domains currently blocked by Cloudflare, using a VPN server in the UK, will be greeted by Cloudflare\u2019s Error 451 blocking notice instead. <\/p>\n

Scale of Blocking Potentially Significant<\/h2>\n

Checking through the new domains blocked yesterday, something else becomes apparent; they appear in multiple blocking orders, not just the one highlighted above. We\u2019re unable to check ~200 domains immediately but at least potentially, hundreds or even thousands of domains could be involved. And that may actually be a very good thing.<\/p>\n

Domains blocked by Sky, BPI and others, don\u2019t appear to be affected, at least as far as we can determine. All relate to sites targeted by the MPA, and the majority if not all trigger malware warnings of a very serious kind, either immediately upon visiting the sites, or shortly after. <\/p>\n

At least in the short term, if Cloudflare is blocking a domain in the UK, moving on is strongly advised.<\/p>\n

From: TF<\/a>, for the latest news on copyright battles, piracy and more.<\/p>\n

Powered by WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"

Internet service providers BT, Virgin Media, Sky, TalkTalk, EE, and Plusnet account for the majority of the UK\u2019s residential internet market and as a result, blocking injunctions previously obtained at the High Court often list these companies as respondents. These so-called \u201cno fault\u2019 injunctions stopped being adversarial a long time ago; ISPs indicate in advance […]<\/p>\n","protected":false},"author":2,"featured_media":84119,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[308],"tags":[],"class_list":["post-84118","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-torrent"],"_links":{"self":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/84118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=84118"}],"version-history":[{"count":0,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/84118\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/media\/84119"}],"wp:attachment":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=84118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=84118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=84118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}