La Liga’s Blocks Sideline Thousands of Websites, Including Basque Domains

Lately, the internet has been experiencing issues on weekends. At first, no one quite understood what was happening with some websites being blocked. Now we know that these blocks come from Spain’s La Liga, which is trying to prevent the illegal broadcasting of football matches.

The problem is that in its attempt to curb piracy, every time there is a La Liga match, thousands of websites unrelated to football also become inaccessible. Among them are Basque websites like Berria.eus and Tropela.eus, which have reported that the restrictions imposed on Cloudflare have affected their operation. Concerned about this situation and the security of users, PUNTUEUS has launched a project to measure the impact of these blocks on .EUS domain websites and to seek solutions.

What Is Happening with .EUS Domains?

According to the technical analysis we conducted with experts, there are currently 209 .EUS domains using Cloudflare as a proxy to enhance their security and speed. The problem is that with La Liga’s blocking orders, internet service providers could cut access to these websites during upcoming La Liga broadcasts.

To understand the real impact and how this affects Basque websites, we will monitor these sites in real-time while the matches take place. With the data collected, we will determine the next steps to take.

In the meantime, many websites are opting to disable Cloudflare out of fear of being blocked. However, this is not the best solution either. First, because it seems that the blocks do not only affect Cloudflare but could extend to other providers as well. And second, because if a website stops using a proxy and later reactivates it, its security will no longer be the same: while its IP was exposed, it left a trace that could be exploited by attackers.

How Did We Get Here?

It all started at the end of 2024 when a court in Barcelona granted La Liga more power to block IP addresses of websites that stream matches without permission. Additionally, it allowed them to identify new IPs and block them without needing new court orders. Using this authority, La Liga ordered internet providers (Movistar, Digi, etc.) to block Cloudflare IP addresses, affecting countless websites unrelated to football.

Cloudflare is a service that acts as an intermediary between a website and its users. It protects websites from cyberattacks, improves speed, and hides the real IP address of the server for greater security. However, by blocking Cloudflare’s IP addresses, La Liga has cut access to thousands of websites of all kinds, including institutions, media outlets, and businesses.

According to the judge, these measures “do not harm third parties,” but reality tells a different story. During La Liga matches, millions of users are unable to access essential websites. Companies and platforms like the RAE, X (Twitter), Agencia EFE, BlueSky, CaixaBank, and LinkedIn have also been affected.

Given this situation, Cloudflare has announced that it will take legal action against La Liga, arguing that these “massive and indiscriminate” blocks are illegal. Additionally, the RootedCon community and other affected parties have filed a lawsuit demanding that the blocks be immediately halted.

At its core, this issue is not just about football piracy. It is about something much bigger: internet neutrality and everyone’s right to access the web without unjustified restrictions.