v2.0.65 (2026-05-15)

Added

• Cloudflare 5xx origin-error page detection — recognizes <domain> | 5xx: <reason> titles, marks as error_page(522) etc. instead of treating as a bypass target
• Per-URL Cloudflare outcome summary log with cookie state + error-code signal
• HTTP status + cf-ray captured at page.goto() time and threaded through to the Cloudflare outcome line
• Surface Cloudflare 5xx origin-error page count in scan stats
• HANG CHECK: per-URL progress counter + per-URL timeout + short-circuit queued URLs on restart flag
• Surface adblock-rust engine stats in debug exit output

Fixed

• HANG CHECK detection logic was debug-gated and never fired in production
• --validate-config TDZ crash by moving block below config load
• Scan-exit hang: cleanups now run on normal completion (was relying on process.exit(0) to skip them)
• nettools: pending-lookup leak + signal-handler conflict with nwss.js cleanup
• cloudflare: null-safe error categorization, unref'd cache timer, body.textContent reuse
• Suppressed contradictory "no indicators / error page detected" log pair

Improved

• cloudflare: precompile skip-proto regex, combine within-category selectors, rename outcome key
• redirect.js: skip detectCommonJSRedirects in production, cap outerHTML, filter chrome-error://
• Cloudflare module banner + "no indicators" log deduped (was firing once per URL)
• npm update: adblock-rs, lru-cache, puppeteer patch bumps
• Removed dead scanner-script-org.js prototype