Why cloudflare shows a challenge on site for every country. We've setup the setting for specific countries (GB DE Malta)

[max29]

Answer these questions to help the Community help you with Security questions.

What is the domain name?
bytereads.net
You can see it in attached image

Have you searched for an answer?
Yes

Please share your search results url:
https://www.google.com/search?q=cloudflare+show+challenge+on+every+country+and+not+on+specific&oq=cloudflare+show+challenge+on+every+country+and+not+on+specific&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTM5MjYwajBqN6gCALACAA&sourceid=chrome&ie=UTF-8

When you tested your domain, what were the results?
I got screen with connection checking spinner and in a moment was redirected to a site homepage

Describe the issue you are having:
My clients from allowed in WAF countries say that they start to see challenges, but they shouldn’t see them.

What error message or number are you receiving?
No errors, just annoying challenges,

What steps have you taken to resolve the issue?

1. Checked the settings in Cloudflare admin dashboard
2. Resave all settings again
3. Asked Google why it’s happens and maybe answer already exist

Was the site working with SSL prior to adding it to Cloudflare?
Yes, ssl installed in the early beginning

What are the steps to reproduce the error:

1. Set you country location to one of three countries: UK, DE or Malta

Have you tried from another browser and/or incognito mode?
Yes, and got challenge even when my country was in white-list
Please attach a screenshot of the error:

I’m not sure if this is an error, I just want to clarify. Is this normal or maybe there is some reason why this happens

[Laudian]

An expression A or B or C is true if either A, B or C are true. In your case, every country will fullfill at least 2 of those.

For Germany, A is false, but B and C are true, so the expression is true.

You probably want to use AND to connect your subexpressions, or better, use a list (if country not in {list} then challenge).