I can not! 😅 but do tell.. .NET Core or not? Personally, I'd disable the WAF first to figure out if that's the source.