Internet-based proxy service to modify internet responses

A first proxy server to modify Internet responses, comprising:

• a memory to store instructions;
• and
• a processor coupled with the memory to process the stored instructions to:
• receive, from a first client device at the first proxy server of a plurality of proxy servers that provide an internet-based proxy service, a first request for a first network resource that is hosted at a first origin server for a first domain, wherein the first request is to be received at the first proxy server as a result of a first Domain Name System (DNS) request for the first domain returning a first IP address that is a same anycast IP address among the plurality of proxy servers of the proxy server instead of a second IP address of the first origin server;
• retrieve the requested first network resource including transmission of the first request to the first origin server and receipt of the requested first network resource from the first origin server in response;
• determine that the retrieved first network resource includes at least one modification token that is of a type that indicates a threat to the first client device;
• for the at least one modification token that is of a type that indicates a threat to the first client device, automatically modify, by the first proxy server, at least a portion of the retrieved first network resource that corresponds to that modification token;
• transmit, by the first proxy server, the modified first network resource to the first client device;
• receive, from a second client device at the first proxy server, a second request for a second network resource that is hosted at a second origin server for a second domain, wherein the second request is to be received at the first proxy server as a result of a second DNS request for the second domain returning a third IP address that is a same anycast IP address among the plurality of proxy servers instead of a fourth IP address of the second origin server;
• retrieve the requested second network resource including transmission of the second request to the second origin server and receipt of the requested second network resource from the second origin server in response;
• determine that the retrieved second network resource includes at least one modification token that that indicates an element to be obfuscated;
• and
• automatically modify the portion of the retrieved second network resource that corresponds to the obfuscation modification token including automatically replacing at least the element to be obfuscated that corresponds to the obfuscation modification token with an obfuscation script, which when executed by a client network application of the second client device, generates the element such that it will be displayed when rendered while not being directly readable by bots.

A non-transitory machine-readable storage medium that provides instructions that, when executed by a processor of a first proxy server, cause said processor to perform operations comprising:

• receiving, from a first client device at the first proxy server of a plurality of proxy servers that provide an internet-based proxy service, a first request for a first network resource that is hosted at a first origin server for a first domain, wherein the first request is received at the first proxy server as a result of a first Domain Name System (DNS) request for the first domain returning a first IP address that is a same anycast IP address among the plurality of proxy servers instead of a second IP address of the first origin server;
• retrieving the requested first network resource including transmitting the first request to the first origin server and receiving the requested first network resource from the first origin server in response;
• determining that the retrieved first network resource includes at least one modification token that is of a type that indicates a threat to the first client device;
• for the at least one modification token that is of a type that indicates a threat to the first client device, automatically modifying, by the first proxy server, at least a portion of the retrieved first network resource that corresponds to that modification token;
• transmitting, by the first proxy server, the modified first network resource to the first client device;
• receiving, from a second client device at the first proxy server, a second request for a second network resource that is hosted at a second origin server for a second domain, wherein the second request is received at the first proxy server as a result of a second DNS request for the second domain returning a third IP address that is a same anycast IP address among the plurality of proxy servers instead of a fourth IP address of the second origin server;
• retrieving the requested second network resource including transmitting the second request to the second origin server and receiving the requested second network resource from the second origin server in response;
• determining that the retrieved second network resource includes at least one modification token that that indicates an element to be obfuscated;
• and
• automatically modifying the portion of the retrieved second network resource that corresponds to the obfuscation modification token including automatically replacing at least the element to be obfuscated that corresponds to the obfuscation modification token with an obfuscation script, which when executed by a client network application of the second client device, generates the element such that it will be displayed when rendered while not being directly readable by bots.