403 — Forbidden
The server understood the request and refused it. Unlike 401 there is no authentication that would make it succeed — the server has decided this request should not be served, and it usually will not say why.
A proxy fixes part of this. A residential IP fixes a 403 that is about the address, which is most of them from a datacenter range. It does nothing for a 403 caused by your TLS fingerprint or a missing header — those follow you to every IP.
Why it happens
Your IP is on a block list. Datacenter ranges are blocked wholesale by many sites.
A bot-detection layer scored the request and rejected it — headers, TLS fingerprint or behaviour rather than the IP.
Geo-restriction: the content is not served to your country at all.
Missing or wrong headers — no User-Agent, no Accept-Language, a Referer that does not match the flow.
Rate limiting implemented as a 403 rather than a 429, which several large sites do.
How to fix it
- Read the body. A CDN 403 usually names itself — Cloudflare, Akamai, DataDome and PerimeterX all leave a signature.
- Try the same URL from a browser on the same IP. If the browser works and your client does not, it is fingerprinting, not the address.
- Send a full, coherent header set. A request with a Chrome User-Agent and no Accept-Language is not what Chrome sends.
- Switch from datacenter to residential IPs if the block follows the address rather than the request shape.
FAQ
What does 403 mean?›
Why am I getting 403?›
How do I fix 403?›
Will a proxy fix 403?›
Going deeper
Other errors
Stop getting 403
Residential IPs across 199 countries, from $7.35/GB — no commitment, no monthly plan.
Get residential IPs →