Infinite Human Verification Loop

When I go to sites that are hosted by Cloudflare, I get into an infinite Human Verification Loop. If for some reason I manage to get into the site, all network requests will return a 403 error. Tried multiple solutions and even contacted my internet provider to see if the issue was on their end.

I have tried flushing the DNS, clearing cache, changing browsers and still happens.

I manage to catch a couple of Ray ID

And by the way, if I use my company’s VPN, I can enter these sites normally.

There are several common reasons a Cloudflare-protected website may block or challenge a site visitor:

  • The visitor’s IP address demonstrated previous suspicious activity online. Review your client IP address for malicious activity at Project Honeypot. If no suspicious activity is observed from the visitor’s IP address after a two-week period, Cloudflare stops challenging the IP address.

  • The website owner has created a Custom Rule or a Firewall Rule to block specific request.

  • The visitor’s actions activated a Web Application Firewall Rule enabled by the website owner.

You can find more information here on Understanding Cloudflare Captchas and Challenge Passage.

If you are being blocked or challenged, please get in touch with the website owner to inquire further on which specific reason that occurs.

It’s also possible that the issue is related to the specific device(s).

Please note that visitors must enable JavaScript and cookies on their browser to be able to pass any type of challenge.
Here are some more suggests that may help with the challenge:

  • Please be sure to update your browsers to the latest version. Outdated browsers may have compatibility issues with this feature.
  • You may also need to disable any browser extensions or add-ons that might be interfering with the human verification process. Some extensions can block or modify website elements, causing issues with the checkbox.
  • Try accessing the website using a different browser. If the issue only occurs with specific browser locales, switching to a different browser might provide a temporary workaround.

More details here: Challenges · Cloudflare Web Application Firewall (WAF) docs