Access denied - Malicious request detected

[chad14]

What is the name of the domain?

HEROIC Cyber Protection Platform

What is the error number?

req_6850b339ac398

What is the error message?

{“error”:“Access denied”,“message”:“Access denied - Malicious request detected”,“request_id”:“req_6850b339ac398”,“timestamp”:“2025-06-17T00:13:45+00:00”}

What is the issue you’re encountering

I cannot see my site

What steps have you taken to resolve the issue?

1. I allowlisted my IP range with IP access rules under security rules.
2. Cleared cache
3. Removed all WAF protections.
4. Changed browsers. (I am able to use the site on other browsers from the same computer)

Nothing works except changing browsers. We need to figure this out so it doesnt happen to other people.

What are the steps to reproduce the issue?

I just need to go to app.heroic.com with chrome from my computer.

Screenshot of the error

[fritex]

@chad14

Access denied - Malicious request detected

May I ask if this is coming from Cloudflare, Chrome or your Anti-virus/Malware softver?

Are you using WARP?

@chad14

(I am able to use the site on other browsers from the same computer)

@chad14

chrome

Are you using any kind of type of an extension such as VPN which might change your IP in Chrome?

@chad14

Nothing works except changing browsers. We need to figure this out so it doesnt happen to other people.

Wonder if it triggers any Security Events, if so I’d suggest you to double-check the Security → Events at Cloudflare dashboard under your Cloudflare account for your zone, or via direct link https://dash.cloudflare.com/?to=/:account/:zone/security/events.

You should be able to see the challenged or blocked event under the Security tab → Events at Cloudflare dashboard for your zone and know exactly which security option was triggered.

Security Events

Once you find them, click on a particular one to find more details about it (user-agent, IP, HTTP version …). If yes, could you share some details which service was triggered that blocked you?

[fritex]

@chad14

but does show up under bot analysis under WAF Analytics

Any which passes or not shows under WAF Analytics.

@chad14

screenshot

Looks like it wasn’t triggered by any service at all. 403 for the particular JSON requests comes from the origin host/server?

Could I suggest you to re-test and use the Trace tool for the particular JSON request as follows on the link below?

Use Cloudflare Trace

@chad14

The event doesn’t show up under

If you don’t see it under the Events tab as challenged or blocked request, you’re good to go.

[chad14]

I figured out the issue. I deleted all my cookies from the browser and it worked. One of the cookies is causing the issues.