I added a CNAME from www to the normal domain.
I also disabled the DNSSEC setup which was hanging on
DNSSEC protects against forged DNS answers. DNSSEC protected zones are cryptographically signed to ensure the DNS records received are identical to the DNS records published by the domain owner.
DNSSEC for your domain will be automatically enabled in the next 24 hours.
DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.
However, I do believe still believe there is an issue with the nameserver registration at Cloudflare.
Performing a remote dig or nslookup of any record that exists, such as the A record for ‘kibje.com’ doesn’t respond with anything but a NXDOMAIN.