Calling proxied api from flutter app gets html response with js challenge

[seyhmusozbek]

What is the name of the domain?

sanita.seyhmusozbek.com.tr

What is the error number?

901f13463b30d5f7-IST

What is the error message?

'

What is the issue you’re encountering

I am getting an html response every once in a while when i am expecting a json response.

What steps have you taken to resolve the issue?

i have tried disabling bot fight modes. added page rule to disable browser integrity check, disable performance, disable security and added waf custom rule that skips everything with customer user agent, but i still get this js challenge. no event logs when i get this response. i even tried adding access rule by allowing my country but did not work.

What are the steps to reproduce the issue?

calling proxied api from flutter app with http library.

Screenshot of the error

[seyhmusozbek]

little bit more context: no event logs when i get this response.

[Chaika]

That doesn’t look like a normal Cloudflare challenge, should be a 403 status code but that shows as a 200. Show all the response headers?

[seyhmusozbek]

here is the all response headers, when i checked this rayid i find nothing.

[Chaika]

@seyhmusozbek

here is the all response headers, when i checked this rayid i find nothing.

Thanks. CF-Cache-Status existing means this response is from your origin server. It’s not Cloudflare’s security or something Cloudflare is returning. Sadly there’s no other hints in there as for what it could be. I’ve seen Lightspeed captcha come up before and looks a lot like Cloudflare’s if you’re using their web server. If you look through the full html response, might contain more hints

[seyhmusozbek]

thank you so much for your swift and kind response. I will check serverside firewall settings as you advised.