How soon will the changes apply

I set the firewall rules and the changes will not apply, UnitPay api cannot work with this, always when send json query it send default check java scripts challenge.
I set the page rules

and set off Under attack mode. And changes will not apply.
How i can change it?

The request what i get it

I try to purge cache and this not solved… How i can do?

I assume these two URLs are callback address which your payment provider uses, right?

If so, shouldnt they be HTTPS?