m0rtem/cloudfail ? reverse-engineered prompt

Build me a Python 3 command line tool that helps with recon on a site that is behind Cloudflare and tries to find the real server IP. It should run a few checks in sequence, first looking for misconfigured DNS results, then checking old database records, and then trying a wide subdomain brute force pass. I want it to be able to route requests through Tor if I turn that on, and I want the output to be easy to read in the terminal with clear status messages and any likely IPs it finds.

Make it feel like a practical security research tool, not a fancy app. Include sensible defaults, basic error handling, and a simple way to pass the target domain from the command line. If you need to, look up current docs online for anything that is outdated. Also make sure it is safe to run in a controlled test environment and clearly warn that it is only for authorized use.