Figure out if it's possible to block fake orders on Khoroshop, mobile operator MTS.

Budget: 1000 UAH Deadline: 1 day

I can take on and deal with fake orders on Khoroshop.

The Khoroshop platform really does not provide deep logging and access to the server, so we work through Cloudflare and traffic analysis.

I can:

Analyze the list of IPs that are making fake orders
Check for patterns:
– ranges
– provider
– type of address (mobile/dynamic/proxy)
– active time
– behavioral patterns

Formulate recommendations for blocking
If blocking the entire network 31.144 is not possible, I will check:
– if subnets /24 or /28 match
– if there are common ASNs
– if rate-limiting or JS challenge can be applied specifically to this behavior

Set up Cloudflare Rules for filtering
Options:
– Challenge based on behavior (UA, frequency, route)
– Filters by country, ASN
– Bot-Fight parameters
– Managed Challenge for suspicious traffic

Prepare an algorithm for further protection so that fakes do not pass even when changing IP.

Deadline: 1 day (analysis + setup)
Cost: 1000 UAH (IP analysis, pattern detection + Cloudflare rules setup) Expand

Budget: 20000 UAH Deadline: 5 days

This is not a bid from me, just thoughts.
I am a Python developer, ideally need a JavaScript developer. Well, that is, any front-end developer in principle.
A custom JavaScript script needs to be created and placed on the front end. I googled, it seems that Goodshop allows this.
The task of the script is to collect something related to human behavior. For example, the fact of clicks on certain buttons. Mobile proxies are expensive, so most likely attackers just place orders through requests. And bypassing Cloudflare in requests takes a couple of minutes. Even almost any captcha (well, with captcha it takes a bit longer, maybe half an hour to an hour).
Therefore, the browser is most likely not opened at all and buttons are not clicked. This fact needs to be captured using the JavaScript script.
Next, a small script needs to be created (in any language), hosted on any server, ideally create a subdomain and direct it to the server. The task of the script is to act as a server to receive requests from clients sent by that JavaScript script with click statistics on buttons (at least just the facts of clicks). It must be in encoded form so that it is not immediately clear what it is. The subdomain and request should look like sending some technical statistics. That is, it cannot be called "bot-check," "antibot," etc.
The script on the server "makes a decision" and records the result in the database, i.e., the IP of the request and the result of whether all necessary buttons were clicked, plus a timestamp and ideally the order number (then the IP is not needed). The difficulty with the IP is that it needs to be collected separately in the Cloudflare service, which is not very convenient, so it's better to use the order number.
Next, either the same script or a separate bot checks the orders on Goodshop against the database data. If an order has been placed and there is either no data about this order in the database or the result is False, then the bot should cancel the order on Goodshop or take another action you need.

In theory, it should take about 3 days to work on this, and it should cost from 5000 to 10000.
But I am currently too busy to devote time to this issue. So I just provided thoughts for consideration.

P.S. I thought about it here - purely out of curiosity and excitement, I can put everything aside and do this. If it doesn't work out - 0 UAH even for the work done. If it works out - 20,000 UAH. Expand