3 ms·

IP enumaration is also pretty trivial. I guess that what attackers might be using to "unhide" domains. Scan the net and request the required domain name?

• seabee 11y ago
  That won't work if the origin firewall allows only CloudFlare IP ranges.
• homero 11y ago
  Maybe but this helps https://support.cloudflare.com/hc/en-us/articles/204899617 https://support.cloudflare.com/hc/en-us/articles/204899617