Sadly, not really true. * Cloudflare has a growing number of competitors, like Incapsula. * These services only protect the front-end of the booter websites.

Sadly, not really true. * Cloudflare has a growing number of competitors, like Incapsula. * These services only protect the front-end of the booter websites. These are barebones CRUD apps for managing accounts and typing the IPs you want DDoS'd. It'd be pretty easy to throw that template up on any other server or domain. Most of that whole workflow could be replaced by IRC, Slack, Discord, Skype along with Bitcoin or similar payment methods. As proof, booter sites do still regularly get DDoS'd (usually by exposing their origin server IP or otherwise fucking up configuration) and breached (often exposing the entire user DB and source code) yet pop back up within a few days and still retain most of their customer base. * They could just move everything to a Tor hidden service, or the equivalent to I2P. It's the botnet and/or list of IPs and URLs (scripts and shells on compromised servers they planted or paid for access to) that serves the foundation of booter services. If that remains untouched, then the booter can stick around indefinitely. Cloudflare's CEO reiterates the same points here: https://news.ycombinator.com/item?id=12577690 https://news.ycombinator.com/item?id=12577690 As for whether they have a moral obligation to stop reverse proxying these sites... I think he makes a pretty good argument for why they should be considered a common carrier. They do forward all abuse reports to the respective hosting providers.