The custom Cloudflare WAF rules we set up on an online store to stop card testing, credential stuffing, and price scrapers, with the exact expressions and the order to turn them on.