So our server admin confirmed wp cerber is creating some cookies due to that cloudflare caching is not working.
Disable “Protect other forms” in the anti-spam settings.
We checked, it’s already disabled.