This is the real origin — an isolated Debian LXC on Proxmox / Contabo, with zero inbound exposure, reachable only through a Cloudflare Tunnel.
In front of it today: Cloudflare.
flareover deterministically rebuilds that edge on
Caddy + PowerDNS + CertMate — 0% false positives.