For Workers & Pages, what is the name of the domain?
What is the error number?
92a0be3f1a50939a
What is the error message?
This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.
What is the issue or error you’re encountering
Step 1: Browser Triggers Speculative Request URL requested: https://insideasiatours.com/cdn-cgi/speculation Step 2: CF intercepted the traffic As soon as the request hit , it was caught by CF Cloudflare recognized this request as a speculative preload request, not a normal browsing action. Cloudflare rules for security and bot prevention said: “If the request is speculative (not a real user action) → BLOCK it.” Step 3: Server Returns 403 Forbidden No authentication or redirection happened, which means the link is not in the bypass list — because the CF immediately blocked it. Response back from server: 403 Forbidden (HTTP status code meaning “Request understood but refused to authorize”). Response Headers: Server: cloudflare Content-Type: text/html Content-Encoding: br (Brotli compressed) Cache-Control: max-age=15 Plus security headers like X-Frame-Options: SAMEORIGIN. Step 4: Browser Receives Error (No Redirection, No Login Prompt) Since the server outright denied access, the browser aborted the speculative request. Chrome/Edge console showed error: net::ERR_ABORTED 403 (Forbidden) Important: No further redirection like login page (/login) or authentication challenge (401 Unauthorized) was triggered. From the HAR logs analyzed so far, it is clear that this behavior is occurring purely at the Cloudflare (CF) layer. There is no indication of any issue on the F1E application side at this point.
What steps have you taken to resolve the issue?
We are not the site owner, so we’re trying to reach out to Cloudflare for help with these issues affecting OUR customers
What are the steps to reproduce the issue?
insideasiatours.com is only one website of many that our customers are being blocked from.
it appears that the only requirement is to have Forcepoint F1E DCEP installed and running and then browse to a website protected by Cloudflare
