Public DNS returns zero records for discoverroles.com, not even NS records, which confirms the NXDOMAIN. The nameserver delegation from Afrihost to Cloudflare is not active, so none of the DNS records you configured in Cloudflare are reachable from the internet. Verify at Afrihost that the NS records are set to the exact nameservers Cloudflare assigned your zone (they look like name1.ns.cloudflare.com / name2.ns.cloudflare.com), and that the domain registration itself is active and not expired or suspended. Once NS delegation is working, make sure Cloudflare has the CNAME and TXT verification records shown under each custom domain in your service's Networking settings. Reply here once the nameserver delegation is confirmed active and the records are in place, and we can re-check.

Everything is in place

Public DNS still returns zero records for discoverroles.com, not even NS records, so the nameserver delegation from Afrihost to Cloudflare is still not active. This means either the NS update at Afrihost has not taken effect yet, the domain registration has expired or been suspended, or the nameservers entered do not match what Cloudflare assigned. Double-check in your Afrihost control panel that the nameservers are set to the exact pair Cloudflare assigned (visible in your Cloudflare dashboard under your zone's DNS settings), confirm the domain registration itself is active, and allow up to 24-48 hours for NS propagation if the change was just made. Until NS delegation resolves, no records you configure in Cloudflare will be reachable from the internet. Reply here once Afrihost confirms the NS change is live and we can re-verify.