diff --git a/4.1-Extensions.md b/4.1-Extensions.md
index 0708946..4421611 100644
--- a/4.1-Extensions.md
+++ b/4.1-Extensions.md
@@ -9,7 +9,7 @@ Legend:
- :green_heart: Extension under development
- :purple_heart: Extension maybe / depends
-### :small_orange_diamond: Recommended Extensions
+### :small_orange_diamond: Extensions
These are all, where applicable, best configured to `deny-all` and whitelist.
* [uBlock Origin](https://addons.mozilla.org/firefox/addon/ublock-origin/) ✔ [Privacy](https://github.com/gorhill/uBlock/wiki/Privacy-policy) | [GitHub](https://github.com/gorhill/uBlock)
@@ -44,7 +44,12 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
* [Enterprise Policy Generator](https://addons.mozilla.org/firefox/addon/enterprise-policy-generator/) | [GitHub](https://github.com/cadeyrn/enterprise-policy-generator)
* For ESR60+ and [Enterprise Policies](https://support.mozilla.org/en-US/products/firefox-enterprise/policies-enterprise)
-### :small_orange_diamond: Recommended Legacy Extensions
+### :small_orange_diamond: Extensions [Tools]
+
+* [uBO-Scope](https://addons.mozilla.org/firefox/addon/ubo-scope/) | [GitHub](https://github.com/gorhill/uBO-Scope)
+* [Detect Cloudflare](https://addons.mozilla.org/firefox/addon/detect-cloudflare/) | [GitHub](https://github.com/traktofon/cf-detect) | [claustromaniac's fork](https://github.com/claustromaniac/detect-cloudflare-PA)
+
+### :small_orange_diamond: Legacy Extensions
* :green_heart: [NoScript 5.1.8.4](https://addons.mozilla.org/firefox/addon/noscript/versions/?page=1#version-5.1.8.4) ✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/)
* Yes, there is a FF57+ non-legacy version. For FF57+, use uMatrix in some hardened configuration instead. This *may* not be a total replacement, as NoScript *might* offer some unique protections debatable: eg: ClearClick, ABE [see here](https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.2.3-uMatrix), XSS really debatable
@@ -61,7 +66,7 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
1 Don't use multiple cookie extensions
-### :small_orange_diamond: Recommended [Legacy] Extensions [Tools]
+### :small_orange_diamond: Legacy Extensions [Tools]
These extensions will not mask or alter any data sent or received, but may be useful depending on your needs