Cloudflare adds __cf_bm cookie to the browser of end user, after I enabled super bot fight management (SBFM). But why does this cookie show the domain as linkedin.com ?
What steps have you taken to resolve the issue?
I’ve tried adding a firewall rule to skip the SBFM firewall settings when host contains linkedin.com but it didn’t work
thank you for reaching out to us. As per indicated by our documentation Cloudflare Cookies · Cloudflare Fundamentals docs : A separate __cf_bm cookie is generated for each site that an end user visits, as Cloudflare does not track users from site to site or from session to session. The __cf_bm cookie is generated independently by Cloudflare, and does not correspond to any user ID or other identifiers in a customer’s web application.
You can begin the process of disabling the __cf_bm cookie via the API.