If someone has a list of 100 random websites which use CloudFlare, it would be interesting to know what % of them are vulnerable to unmasking via CrimeFlare. This could give us a general idea of the scale of this vulnerability, as well as a rough estimate to how much money their customers are paying for pointless protection. I suspect it may be a non-trivial sum of money to the tune of multi-millions.