diff --git a/data/bots/aggressive-brazilian-scrapers.yaml b/data/bots/aggressive-brazilian-scrapers.yaml
index 6b38d540..140811a7 100644
--- a/data/bots/aggressive-brazilian-scrapers.yaml
+++ b/data/bots/aggressive-brazilian-scrapers.yaml
@@ -6,8 +6,6 @@
     - userAgent.contains("MSIE")
     # Trident is the Internet Explorer browser engine
     - userAgent.contains("Trident")
-    # iPods are not in common use
-    - userAgent.contains("iPod")
     # Opera is a fork of chrome now
     - userAgent.contains("Presto")
     # Windows CE is discontinued
@@ -26,5 +24,5 @@
     any:
     # This is not released, even Windows 11 calls itself Windows 10
     - userAgent.contains("Windows NT 11.0")
-    # Safari's User-Agent doesn't contain Safari
-    - (!userAgent.contains("Chrome") && userAgent.contains("Safari"))
\ No newline at end of file
+    # iPods are not in common use
+    - userAgent.contains("iPod")
\ No newline at end of file
diff --git a/data/bots/cloudflare-workers.yaml b/data/bots/cloudflare-workers.yaml
index 03059d87..3fe051be 100644
--- a/data/bots/cloudflare-workers.yaml
+++ b/data/bots/cloudflare-workers.yaml
@@ -1,4 +1,4 @@
 - name: cloudflare-workers
-  expression: >
-    "Cf-Worker" in headers
+  headers_regex:
+    CF-Worker: .*
   action: DENY
\ No newline at end of file
diff --git a/lib/anubis_test.go b/lib/anubis_test.go
index 4f3a165e..35faa163 100644
--- a/lib/anubis_test.go
+++ b/lib/anubis_test.go
@@ -83,7 +83,7 @@ func TestCVE2025_24369(t *testing.T) {
 		Next:   http.NewServeMux(),
 		Policy: pol,
 
-		CookieDomain:      "local.cetacean.club",
+		CookieDomain:      ".local.cetacean.club",
 		CookiePartitioned: true,
 		CookieName:        t.Name(),
 	})