What happened: During a Cloudflare security configuration update to protect the admin portal login page, a WAF rule was broadened to cover the entire admin.bixypayments.io domain. This caused Cloudflare's Managed Challenge to block automated monitoring health checks, which cannot complete browser-based challenges. As a result, BetterStack incorrectly reported the Settlement System, Payment Processing, KYC Service, Email Service, TRON RPC, and Ethereum RPC as down.

Impact: No actual service disruption occurred. All API endpoints remained fully operational throughout. The incident was limited to false-positive monitor alerts only.

Resolution: All health check monitors were migrated to target api.bixypayments.io directly, bypassing the browser-facing Cloudflare challenge layer. All monitors returned to Up status within the next check cycle.

Prevention: Health check monitor URLs are now decoupled from the frontend domain and will not be affected by future Cloudflare frontend security changes.