new file to catalog the myths about CloudFlare; 403 sites added

myth_catalog.md

@@ -0,0 +1,3 @@
+| Myth | Manifestation Log | Truth |
+| --- | --- | --- |
+| myth 1: CloudFlare does not see the traffic because it is encrypted *end-to-end*. | [2019 Oct.](https://www.reddit.com/r/Ohio/comments/djn4h6/voter_suppression_secretary_of_state_is_now/f47hpf0/) [2019 Oct.](https://www.reddit.com/r/legaladviceofftopic/comments/dj9nhv/oh_state_secretary_website_now_in_cloudflares/f43400e/) | The tunnel with one endpoint at the visitor's browser ***always*** terminates at CloudFlare.  There may or may not be a separate tunnel between CloudFlare and the source site, but either way CloudFlare sees all traffic in the clear ([source 1](https://cypherpunk.is/2015/04/02/why-cloudflare-is-probably-a-honeypot/), [source 2](http://cryto.net/~joepie91/blog/2016/07/14/cloudflare-we-have-a-problem/)) |

not_cloudflare/list_http_error.txt

@@ -15,6 +15,7 @@ cheaptickets.com 403
 citizensbankonline.com 403
 cnbc.com 403
 curbed.com 403
+culiance.com 403
 delishably.com 403
 delta.com 403
 dengarden.com 403
@@ -40,6 +41,7 @@ hot-topic.co.nz 403
 hotwire.com 403
 hubpages.com 403
 hunker.com 403
+huntington.com 403
 ibanking-services.com 403
 intra.ruc.dk 403
 irs.gov 403
@@ -70,6 +72,7 @@ retailmenot.com 403
 rijksoverheid.nl 403
 riteaid.com 403
 safeco.com 403
+sapling.com 403
 sec.gov 403
 securifi.com 403
 signon.ruc.dk 403

not_cloudflare/list_othercdn_domain.txt

@@ -1,3 +1,5 @@
 calreinvest.org Z7
+linuxincluded.com Z7
 livingmoldfree.com Z7
 thewimpyvegetarian.com Z7
+triptothewild.com Z7