That also happens to files like xmlrpc.php or .env; anyway their nginx instance always returns 444 (so the server closes the connection without response) when a file blocked for privacy or security reasons is accessed through a browser, so Cloudflare will return a 520 instead of an empty response error from the browser.
6 Likes