Netlify DNS zone shows correct NETLIFY records but apex resolves to unrelated AWS IPs (my.id domain)

Support
1

Hi Netlify team,

My site is andrew-hardianto-portofolio.netlify.app, custom domain andrewhardianto.my.id (registered via IDCloudHost, using Netlify DNS / NS1 nameservers).

Nameservers — confirmed correct via dig NS:

dns1.p03.nsone.net
dns2.p03.nsone.net
dns3.p03.nsone.net
dns4.p03.nsone.net

My Netlify DNS zone only contains the expected records:

  • andrewhardianto.my.id — NETLIFY → andrew-hardianto-portofolio.netlify.app
  • www.andrewhardianto.my.id — NETLIFY → andrew-hardianto-portofolio.netlify.app

No A records exist anywhere in my zone.

However, the apex domain resolves externally to two AWS IPs that do not appear anywhere in my DNS zone:

$ dig A andrewhardianto.my.id
andrewhardianto.my.id. 120 IN A 52.74.6.109
andrewhardianto.my.id. 120 IN A 13.215.239.219

These are AWS ap-southeast-1 (Singapore) IPs, not Netlify’s load balancer IP.

Impact: The SSL/TLS certificate page shows: “We could not provision a Let’s Encrypt certificate for your custom domain.” This has been failing consistently even after verifying DNS configuration multiple times over the past day.

I found a very similar report from another user (thread: “Apex domain resolves to phantom AWS IPs not present in my Netlify DNS zone — blocks SSL provisioning,” June 2026) with the same symptom — a clean zone with only NETLIFY records, but the apex resolving to stale/phantom AWS IPs not present in the zone.

Could you please check and rebuild/refresh the NS1 zone for andrewhardianto.my.id so it matches what’s actually configured in my Netlify DNS records, and re-attempt certificate provisioning once resolved?

Thanks in advance for your help!