Just to jump in, this may be related to the DNS issue but if you say it was happening prior to that, that may equally be a coincidence.
You mention “the root one”. Do you mean the apex domain? If so, I recall a mention you needed both A and AAAA records to validate that. I’m not sure if that’s still the case but could be worth a try. Can’t hurt. From Fly: