Well. Check if the auth DNS of said failed domains are served by Cloudflare DNS. And then we go from there.