turns out it's all cloudflare's fault. maybe having a single point of failure for half the internet isn't good..