diff --git a/waf/sucuri.py b/waf/sucuri.py
index 8a9e054a8..1babc671e 100644
--- a/waf/sucuri.py
+++ b/waf/sucuri.py
@@ -17,8 +17,7 @@ def detect(get_page):
 
     for vector in WAF_ATTACK_VECTORS:
         page, headers, code = get_page(get=vector)
-        retVal = code == 403
-        retval = re.search(r"Sucuri/Cloudproxy", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
+        retVal = code == 403 and re.search(r"Sucuri/Cloudproxy", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
         if retval:
             break