The edge you hit is wherever YOU are. A CDN is anycast: the same address answers from Frankfurt for an analyst in Germany and from Ashburn for one in Virginia. Geolocating that address measures your own position, not the service’s. This tool deliberately does not report it as the answer, because it is the one number that looks authoritative and means nothing.
The operator’s jurisdiction is usually the real question. Which company runs the edge, and under whose law does it sit? That determines who can compel disclosure, whose sanctions apply, and whether traffic for a domain you care about is terminating inside a company answerable to a government you would rather it were not. A US critical-infrastructure site fronted by a Russian or Chinese CDN is worth knowing regardless of where the nodes are.
The origin country is the third, and the hardest to see. A CDN exists to hide it. Where records leak past the edge — a mail host, a nameserver, a subdomain outside the CDN — the country behind them is shown and labelled as inference.
Jurisdiction here is headquarters, not the whole picture. It is a curated fact about where each operator is incorporated, not a legal opinion. Ownership, subsidiaries, where data physically rests and which subprocessors are used all sit underneath it and none are visible from DNS. Treat this as the question to start asking, not the answer.
.gov, .mil or .us: is the service actually
operated from somewhere else? Checks the edge operator, who runs DNS, where the netblock is registered
and where mail routes. Foreign edge nodes are not flagged — that is what a CDN does.