This is happening to me as well, between my forum (actually, a subdomain) and the main domain.
Both are using cloudflare, I also tried to add a Firewall rule to allow all User Agents containing "Xenforo/2" in the name, but this doesn't seem to solve the issue unfortunately.
Anything else I could try to avoid error 403?
Thanks in advance.
UPDATE
Actually, it looks like it cannot unfurl links from the forum itself as well, I'm quite confused, everything was working fine before, maybe it's Redis? It's the only change I recently did.
UPDATE #2
Turned out to be an IPV6 address I blocked (didn't know Xenforo used an IPV6 connection for the UNFURL function).