When a network of sites is hit by a CC attack, you need to flip the affected domains to Cloudflare's Under Attack mode fast. Doing it one by one is slow — CF Toolbox does it in bulk.
What is Under Attack mode
Visitors first pass a 5-second JS challenge from Cloudflare, filtering most automated attack traffic while real browsers pass automatically.
Bulk enable steps
- Open "Domain list" and select the domains to protect.
- Click the red "🚨 Under Attack" button in the floating bar; confirm to apply to all selected domains.
- When the attack subsides, click "✅ Turn off" to restore the security level to Medium.
Complementary settings
Under the "🛡️ Security" menu you can also batch-set browser integrity check, minimum TLS version and Bot Fight Mode; under "⚙️ More" you can enable DNSSEC in bulk for stronger protection.