Unblock challenges.cloudflare.com to continue: Global Cloudflare flaw takes down X, ChatGPT and Spotify

A widespread failure in Cloudflare services left millions of users without access to websites and applications this Tuesday, November 18, 2025. The message “unblock challenges.cloudflare.com to continue” appeared en masse when trying to load pages protected by the company.

The problem started around 12:00 UTC, shortly after scheduled maintenance at a datacenter in Chile. Cloudflare’s own status page recorded degradation in edge services and APIs in several regions around the world.

Reports on Downdetector exceeded 15 thousand simultaneous complaints about X, ChatGPT, Spotify, Canva and League of Legends. The outage affected both web versions and part of the mobile applications.

Platforms most impacted by challenge error

Cloudflare security challenge failed to load, displaying internal error 500. Users were stuck at the verification screen with no way to proceed.

The peak of complaints occurred between 1 pm and 2 pm UTC, with the highest concentration in North America, Europe and Brazil and Southeast Asia.

Immediate response from Cloudflare

The company identified the incident as “degradation in application services” andactivated global response team. Fixes were applied in stages, with partial recovery recorded at 14:30 UTC.

Traffic was redirected to alternative routes while engineers patched the affected node. Real-time updates have been published on status.cloudfarestatus.com.

As of 4pm UTC, 92% of services were already operating within normal parameters, according to an internal statement.

Leia Tambem

Amazon Prime’s new ice hockey romance adaptation captivates global audiences with record viewership

Remote gold mine gripped by surging ebola cases, health workers face uphill battle

Schumacher at 57: A private battle over a decade post-accident with new insights in 2026

Services that showed different behaviors

X recorded extreme slowness in the feed and failed login via browser. Mobile app worked with delays of up to 40 seconds.

ChatGPT and other OpenAI products were inaccessible for 48 minutes. Users received the same challenge blocked message.

Spotify displayed connection error in playlists and search. League of Legends prevented entry into game queues due to blocked security check.

Canva, DoorDash, Crunchyroll and Zoom were also on the list of platforms with partial or total instability.

Technical origin of the failure

The challenges.cloudflare.com engine validates visitors against bots through JavaScript. When the domain did not respond, the authentication cycle broke.

Reliance on a single point for global challenges expanded the scope of the incident. Experts point out the risk of centralizing critical layers of security.

Measurethose recommended during instability

• Clearing the browser’s cache and cookies speeded up access in some cases.
• Use of mobile networks instead of fixed Wi-Fi bypassed regional blocks.
• Native applications showed faster recovery than web versions.
• Avoiding constant reloading helped to avoid overloading alternative routes.

Cloudflare said it will publish a full root cause report in the coming days.