DNS Propagation Issue - CNAME record stuck as TXT / Shadow record conflict

I am experiencing a persistent DNS propagation issue with my domain playeraim.com.

In my Cloudflare dashboard, I have configured a CNAME record for the subdomain bounce-zem pointing to cluster89.zeptomail.eu with "DNS Only" (Grey Cloud) status. However, public DNS lookups and direct queries to Cloudflare nameservers (alan.ns.cloudflare.com) continue to return a TXT record (SPF) instead of the CNAME.

The returned TXT record is: v=spf1 include:eu.zeptomail.net -all

I have already tried the following:

Deleted the CNAME and recreated it.
Verified that there are NO TXT records with the name bounce-zem in my dashboard.
Toggled the Proxy status and changed TTL values to force a sync.
It seems like a "shadow record" or a synchronization issue between the dashboard UI and the actual authoritative nameservers. Could you please manually flush the DNS zone or check for any hidden/API-added records that might be blocking this CNAME resolution?

Thank you.

sjr•12/20/25, 12:13 AM

At the moment bounce-zem.playeraim.combounce-zem.playeraim.com is returning Cloudflare IPs, are you sure it's not proxied?

sjr•12/20/25, 12:13 AM

https://cf.sjr.dev/tools/check?8919ca9693a74f35afe984a9ec947b61#dns

sjr•12/20/25, 12:15 AM

As for cluster89.zeptomail.eucluster89.zeptomail.eu that does only resolve to an SPF TXT record so not sure what you were expecting it to do

sjr•12/20/25, 12:15 AM

dig +short cluster89.zeptomail.eu a
dig +short cluster89.zeptomail.eu aaaa
dig +short cluster89.zeptomail.eu txt
"v=spf1 include:eu.zeptomail.net -all"

dig +short cluster89.zeptomail.eu a
dig +short cluster89.zeptomail.eu aaaa
dig +short cluster89.zeptomail.eu txt
"v=spf1 include:eu.zeptomail.net -all"

sjr•12/20/25, 12:18 AM

Can you show a screenshot of your Cloudflare DNS records?

P-POP•12/20/25, 11:49 AM

Yes, it was my mistake; I forgot to include it in the proxy routing. But the problem I mentioned existed even without proxy routing. I've fixed it now.

P-POP•12/20/25, 11:56 AM

I am reporting a severe synchronization issue between my dashboard and the authoritative nameservers for playeraim.com. I have another domain (playeraim.net) with an identical setup that works perfectly, which proves the issue is specific to the .com zone.

The Issue:
For the subdomain bounce-zem.playeraim.com, my dashboard shows a CNAME record pointing to cluster89.zeptomail.eu (DNS Only). However, your nameservers (alan.ns.cloudflare.com) are serving a TXT record instead of the CNAME.

Technical Comparison:

playeraim.net (WORKING CORRECTLY):

Query: nslookup -type=CNAME bounce-zem.playeraim.net
Result: canonical name = cluster89.zeptomail.eu
Status: Verified and working as expected.

playeraim.com (BROKEN / CLOUDFARE SYNC ISSUE):

Query: nslookup -type=CNAME bounce-zem.playeraim.com
Result: (Empty / No record found)
Query: nslookup -type=TXT bounce-zem.playeraim.com
Result: "v=spf1 include:eu.zeptomail.net -all"
Status: Broken. My dashboard DOES NOT have this TXT record, but your nameservers are serving it, which blocks the CNAME resolution.
Actions Taken:
I have deleted and recreated the CNAME multiple times.
I have tried "poking" the record by changing TTL and Proxy status.
I have verified there are no overlapping TXT records in my dashboard.
It appears to be a "Shadow Record" or a Zone File corruption where an old or API-added TXT record is stuck in your backend. Could you please manually purge/resync the DNS zone for playeraim.com and ensure that only the records visible in my dashboard are being served?

Thank you for your assistance.

P-POP•12/20/25, 11:57 AM

P-POP•12/20/25, 12:13 PM

https://dnschecker.org/#CNAME/bounce-zem.playeraim.com
and
https://dnschecker.org/#CNAME/bounce-zem.playeraim.net

P-POP•12/20/25, 12:15 PM

sjr•12/20/25, 12:26 PM

The CNAME target is returning the content of the TXT record. I assume you expect that. The only issue appears to be that the .com.com does not show the interim CNAME...

sjr•12/20/25, 12:26 PM

dig +short bounce-zem.playeraim.com txt
"v=spf1 include:eu.zeptomail.net -all"
dig +short bounce-zem.playeraim.net txt
cluster89.zeptomail.eu.
"v=spf1 include:eu.zeptomail.net -all"

dig +short bounce-zem.playeraim.com txt
"v=spf1 include:eu.zeptomail.net -all"
dig +short bounce-zem.playeraim.net txt
cluster89.zeptomail.eu.
"v=spf1 include:eu.zeptomail.net -all"

sjr•12/20/25, 12:27 PM

This usually indicates CNAME flattening is enabled for the record or for the whole zone, but that's only available on paid plans and IPs indicate you are on a free plan. Have you recently downgraded your plan?

sjr•12/20/25, 12:30 PM

Can you create the same record as bounce-zem2bounce-zem2 as well, you don't have other CNAMEs I can check for flattening on that zone.

sjr•12/20/25, 12:35 PM

History indicates you may have had a paid plan 3 years ago. It's likely that you had CNAME flattening enabled for the zone at the time and that has stayed in place even though the plan was downgraded.