Figured it out! It was Cloudflare “Bot Fight Mode”. I tried using page rules to exclude this feature but failed. I found out you need to either disable the feature or use a WAF exclusion to bypass it for your nostr:npub155m2k8ml8sqn8w4dhh689vdv0t2twa8dgvkpnzfggxf4wfughjsq2cdcvg url. Success! I used lnurlpay.com to troubleshoot the issue, find the 403 error, and then use Cloudlfare logs to see the bot detection issue.