For the under attack mode id use another device or swap IPs, i noticed it whenever id place our of country/continent rules and see IPs logged from places other than america, this domain I help manage is a small business that offers local community services.
So i loaded different IPs besides america and see that they wernt being blocked which brough me to checking other things like if HSTS is working and its not, i tried to change the duration to 6 months to a year and so on.