The target site, or a CDN in front of it.

403 — Forbidden

The server understood the request and refused it. Unlike 401 there is no authentication that would make it succeed — the server has decided this request should not be served, and it usually will not say why.

A proxy fixes part of this. A residential IP fixes a 403 that is about the address, which is most of them from a datacenter range. It does nothing for a 403 caused by your TLS fingerprint or a missing header — those follow you to every IP.

Why it happens

Your IP is on a block list. Datacenter ranges are blocked wholesale by many sites.

A bot-detection layer scored the request and rejected it — headers, TLS fingerprint or behaviour rather than the IP.

Geo-restriction: the content is not served to your country at all.

Missing or wrong headers — no User-Agent, no Accept-Language, a Referer that does not match the flow.

Rate limiting implemented as a 403 rather than a 429, which several large sites do.

How to fix it

  1. Read the body. A CDN 403 usually names itself — Cloudflare, Akamai, DataDome and PerimeterX all leave a signature.
  2. Try the same URL from a browser on the same IP. If the browser works and your client does not, it is fingerprinting, not the address.
  3. Send a full, coherent header set. A request with a Chrome User-Agent and no Accept-Language is not what Chrome sends.
  4. Switch from datacenter to residential IPs if the block follows the address rather than the request shape.

FAQ

What does 403 mean?›
The server understood the request and refused it. Unlike 401 there is no authentication that would make it succeed — the server has decided this request should not be served, and it usually will not say why. The target site, or a CDN in front of it.
Why am I getting 403?›
Your IP is on a block list. Datacenter ranges are blocked wholesale by many sites. A bot-detection layer scored the request and rejected it — headers, TLS fingerprint or behaviour rather than the IP. Geo-restriction: the content is not served to your country at all. Missing or wrong headers — no User-Agent, no Accept-Language, a Referer that does not match the flow. Rate limiting implemented as a 403 rather than a 429, which several large sites do.
How do I fix 403?›
Read the body. A CDN 403 usually names itself — Cloudflare, Akamai, DataDome and PerimeterX all leave a signature. Try the same URL from a browser on the same IP. If the browser works and your client does not, it is fingerprinting, not the address. Send a full, coherent header set. A request with a Chrome User-Agent and no Accept-Language is not what Chrome sends. Switch from datacenter to residential IPs if the block follows the address rather than the request shape.
Will a proxy fix 403?›
A residential IP fixes a 403 that is about the address, which is most of them from a datacenter range. It does nothing for a 403 caused by your TLS fingerprint or a missing header — those follow you to every IP.

Going deeper

Other errors

Stop getting 403

Residential IPs across 199 countries, from $7.35/GB — no commitment, no monthly plan.

Get residential IPs →