Apex domains cannot have CNAME records.
Question and response
Question
dig bulletproof.net. NS
Answer
bulletproof.net. 3 NS ns1.bulletproof.net.au.
bulletproof.net. 3 NS ns0.bulletproof.net.au.
Authority
The response has no authority records.
Additional
ns0.bulletproof.net.au. 3 A 202.44.98.24
ns1.bulletproof.net.au. 3 A 64.71.152.56
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0