I send emails through Sendgrid. In order to have https on my tracked email link (instead of http), they recommended I use cloudflare. Now some customers getting “Sorry, you have been blocked” message when they click on tracked links in my email. Here is an example of one of the links that: Essential Oils for Pets: Fireworks & Thunderstorms
What steps have you taken to resolve the issue?
I have looked through my Cloudflare settings. We have no custom security rules or blocked locations.
Was the site working with SSL prior to adding it to Cloudflare?
Yes
What is the current SSL/TLS setting?
Full
What are the steps to reproduce the issue?
Unable to reproduce. Certain users have reported the issue.
You should be able to see the challenged or blocked event under the Security tab → Events at Cloudflare dashboard for your zone and know exactly which security option was triggered.
Once you find them, click on a particular one to find more details about it (user-agent, IP, HTTP version …). If yes, could you share some details which service was triggered that blocked you?
I clicked on one of the events and it is a “Browser integrity Check” (action taken: Block). User Agent:
“Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36”
That’s okay and good to have it enabled due to a lot of bad traffic and bots online nowadays and to keep them away from your Website and real visitors.
Might be the visitors have had some kind of a Web browser extension such as VPN add-on or some other e.g. Anti-Virus/Malware which interefere with their browsing behaviour and Web traffic.
Looks like it’s not so old user-agent, rather newer one