Consider limiting HTTP access to Cloudflare's IP range. Looking up DNS history reveals the real IP address for direct attacks.
curl -k https://134.209.46.107/products/ -H "Host: api.getmakerlog.com"