Apple Store "Add to Bag" returns "Page Not Found" (HTTP 541) in Chrome and Firefox, works in Safari and on cellular
PROBLEM
Since about a week ago (late Oct 2026), adding any product to the bag on apple.com/shop (US store) lands on "The page you're looking for can't be found." The URL is the configurator URL with add-to-cart=add-to-cart&atbtoken=... appended. It happens with every product I tried (iPad Air 11" and 13").
WHAT I TESTED
- Chrome (macOS): normal, Incognito, Guest -> Fails
- Firefox (macOS) -> Fails
- Embedded Chromium browser (another app) -> Fails
- Safari (macOS): regular and Private -> Works
- Chrome on Pixel phone, home Wi-Fi -> Fails
- Chrome on Pixel phone, cellular data -> Works
- Personal laptop, home Wi-Fi: Chrome fails, Safari works
- Work laptop behind a corporate proxy: Chrome fails, Safari works (same public IP in both browsers)
- Router and modem powered off for 10+ minutes -> No change
- DNS changed to 1.1.1.1 and 8.8.8.8 -> No change
- IPv6 set to link-local only -> No change
- iCloud Private Relay off -> Safari still works
- Extensions disabled, clean profile -> No change
WHAT THE NETWORK TRAFFIC SHOWS
- The product page and configurator load with HTTP 200. So do updateSummary, purchase-options, product-gallery and bag/status.
- GET /shop/fulfillment-messages returns HTTP 541, and the body is the "Page Not Found - Apple" HTML. It does the same with any ZIP or location parameter.
- The Add to Bag request (the URL above) also returns HTTP 541 with the same page.
- Responses show "server: Apple" and Akamai timing headers. My browser holds shld_bt_m and shld_bt_ck cookies, set by /shop/shld/v3/verify.js.
HYPOTHESIS (UNCONFIRMED)
The page isn't missing. Apple's edge seems to reject the cart and availability requests with a custom 541 and shows the 404 page. Only two request types fail. Safari passes and every other browser fails on two unrelated IPs (home and corporate), while cellular IPs pass. That suggests bot or abuse protection that combines IP reputation with browser characteristics, but I can't verify this from outside.
QUESTIONS
Has anyone else seen HTTP 541 from /shop/fulfillment-messages or on Add to Bag? Can Apple staff confirm whether the store's bot protection is blocking non-Safari browsers on certain networks? Workaround for now: Safari, or cellular.
