What's your response header content? Reads like it's being cf-mitigated.

Edit: loosened a cf rule, should be good now.