Http URLs loading as Ubuntu web server not Cyberpanel

Hello
Hope everyone is well,

Server is Vultr 1 click cyberpanel install
Cyberpanel Version V2.3.5 (Updated from V2.3.4) but issue was happening before update and started out of the blue.
Ubuntu 20.04.6 LTS

it has started because the Lets encrypt SSL wont renew and i have found that if you go to the http URL of the domain it takes you to the ubuntu web server and not cyberpanel
Ubuntu location is /var/www/html/index.html

it does this for every domain and subdomain, but if you specify https:// it goes to the correct location.
subdomains
http://xx.xx.com.au goes to ubuntu web server
https://xx.xx.com.au works fine and goes to proper website

and the same with main domains
http://xx.com.au goes to ubuntu web server
https://xx.com.au works fine and goes to proper website

i did the update to cyberpanel from V2.3.4 to V2.3.5 in the hope it would fix it,
In march my main domain SSL auto renewed and was working then but this month the subdomain required renewing and i got an email saying it failed

Error log when manually attempting SSL, it to me looks like the Port 80 request from Lets Encrypt is hitting the ubuntu web server and not cyberpanels correct website

Error Log For SSL Request

[05.29.2024_05-04-35] /usr/local/CyberCP/bin/python /usr/local/CyberCP/plogical/virtualHostUtilities.py issueSSL --virtualHostName bpw.MyDomainWasHere.com.au --administratorEmail [email protected] --path /home/MyDomainWasHere.com.au/bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-35] uQ0Q1Js7WVxsLh2WznP3fOdt+KBEwSpesudo /usr/local/CyberCP/bin/python /usr/local/CyberCP/plogical/virtualHostUtilities.py issueSSL --virtualHostName bpw.MyDomainWasHere.com.au --administratorEmail [email protected] --path /home/MyDomainWasHere.com.au/bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-35] Covered domains: ['bpw.MyDomainWasHere.com.au', 'www.bpw.MyDomainWasHere.com.au']
[05.29.2024_05-04-35] [CheckIfSSLNeedsToBeIssued] SSL exists for bpw.MyDomainWasHere.com.au and both versions are covered, just need to ensure if SSL is valid for less then 15 days.
[05.29.2024_05-04-35] [CheckIfSSLNeedsToBeIssued] We will issue SSL for bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-35] chmod -R 755 /usr/local/lsws/Example/html
[05.29.2024_05-04-35] touch /usr/local/lsws/Example/html/.well-known/acme-challenge/bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-35] Status Code: 404 for: http://www.bpw.MyDomainWasHere.com.au/.well-known/acme-challenge/bpw.MyDomainWasHere.com.au. Error: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at www.bpw.MyDomainWasHere.com.au Port 80</address>
</body></html>

[05.29.2024_05-04-35] Status Code: 404 for: http://bpw.MyDomainWasHere.com.au/.well-known/acme-challenge/bpw.MyDomainWasHere.com.au. Error: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at bpw.MyDomainWasHere.com.au Port 80</address>
</body></html>

[05.29.2024_05-04-38] /root/.acme.sh/acme.sh --issue -d bpw.MyDomainWasHere.com.au -d www.bpw.MyDomainWasHere.com.au --cert-file /etc/letsencrypt/live/bpw.MyDomainWasHere.com.au/cert.pem --key-file /etc/letsencrypt/live/bpw.MyDomainWasHere.com.au/privkey.pem --fullchain-file /etc/letsencrypt/live/bpw.MyDomainWasHere.com.au/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypt
[05.29.2024_05-04-47] Failed to obtain SSL for: bpw.MyDomainWasHere.com.au and: www.bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-47] Trying to obtain SSL for: bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-47] /root/.acme.sh/acme.sh --issue -d bpw.MyDomainWasHere.com.au --cert-file /etc/letsencrypt/live/bpw.MyDomainWasHere.com.au/cert.pem --key-file /etc/letsencrypt/live/bpw.MyDomainWasHere.com.au/privkey.pem --fullchain-file /etc/letsencrypt/live/bpw.MyDomainWasHere.com.au/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypt
[05.29.2024_05-04-55] Failed to obtain SSL, issuing self-signed SSL for: bpw.MyDomainWasHere.com.au
[05.29.2024_05-04-57] Websites matching query does not exist. [installSSLForDomain:72]
[05.29.2024_05-04-57] We are not able to get new SSL for bpw.MyDomainWasHere.com.au. But there is an existing SSL, it might only be for the main domain (excluding www).
[05.29.2024_05-05-00] systemctl restart lsws
[05.29.2024_05-05-00] systemctl restart postfix
[05.29.2024_05-05-00] systemctl restart dovecot

Update
i ran sudo systemctl stop apache2
this seems to be working, not sure why ubuntu apache2 was picking up the request all of a sudden
would it be safe to remove apache2