WAF denied access due to Local File Inclusion (LFI) anomaly and attempted access to sensitive .env configuration file.