[zamadatix]

When I do a lookup on beamed.st I get an IP in 2606:4700::/32 which is currently advertised from AS13335 "Cloudflare, Inc."

Edit: I now realize gruez meant the beamed.st site itself is behind Cloudflare DDoS, completing the loop to explaining what Cloudflare's involvement was :).

[two_handfuls]

Yes that looks the same whether they provide DDoS protection or host.

[zamadatix]

Ahhh, I completely misread who the DDoS protection was being provided to. Must be a slow day for me :). Thanks!