Usually: Domain does not point to the server (incorrect A record) Propagation has not been completed Cloudflare proxy active (solution: “Pause proxy” for Let’s Encrypt)