I had a fiddle but it looks like the Cloudflare site has changed way too much - including the use of tokens in URLs. If it still possible to use the Cloudflare site in this way - and it may not be - the application will require a major rewrite, I think.

I can appreciate that it was pretty cool when it was working though!

After running script.
The result is showing :

{"success":false,"errors":[{"code":1097,"message":"This zone is banned and cannot be added to CloudFlare at this time, please contact CloudFlare Support."}],"messages":[],"result":null}

I'm getting an API error

This zone is banned and cannot be added to Cloudflare at this time, please contact Cloudflare Support

Was it fixed by now?

>python cloudflare_enum.py [email protected] mypass disney.com

{"success":false,"errors":[{"code":6004,"message":"Invalid request headers","error_chain":[{"code":6301,"message":"Invalid format for X-ATOK header"}]}],"messages":[ ],"result":null}

Same thing for any domain I put in

Can't CloudFlare fix this? I'm assuming it's been reported to them, right? It seems like a major security flaw as it allows people to bypass their entire system if they can figure out the A record.