404 error on main domain

[tomhudock]

Hi, our website was working for weeks, then today we’re getting a “404 page not found” for the main domain (ballsyfoods.com) but a subdomain works fine (club.ballsyfoods.com).

When I check DNS Checker, the domain shows red X’s → DNS Checker - DNS Propagation Check & DNS Lookup

The CNAME is the same for ballsyfoods.com and www subdomain. Proxied.

With URL forwarding:

I tried Purging the Cache. No change.

This has stumped me on what seems to be a basic setup. Would anyone have a hint on this one?

Thank you, Tom

[CreatorRevealed]

@tomhudock

but a subdomain works fine (club.ballsyfoods.com).

This subdomain does not even exist.

[sdayman]

@tomhudock

the domain shows red X’s

You can’t technically have a CNAME for the apex domain, so Cloudflare will always convert it to an “A” record. Plus…if it’s Proxied, it’d also show up as an “A” record.

Back to the issue…the main domain actually redirects to ‘www’, and that’s where the 404 is.

What’s your SSL/TLS mode? It should be Full (Strict).

[sdayman]

@CreatorRevealed

subdomain does not even exist.

Yes it does, it’s a CNAME.

[tomhudock]

Yep the subdomain’s full URL is The Ballsy Club Sign-up | Ballsy Foods (working, yay).

SSL is Full Mode.

[tomhudock]

@sdayman

What’s your SSL/TLS mode? It should be Full (Strict).

Does “Full(Strict)” require a 3rd party SSL certificate?

[sdayman]

Full (Strict) requires a valid certifiate. Either from Let’s Encrypt, etc., or an official Cloudflare Origin certificate:
https://developers.cloudflare.com/ssl/origin-configuration/origin-ca

Quite often, a 404 shows up when the server isn’t properly configured for HTTPS.

[tomhudock]

Thank you @sdayman ! The website is coming through as expected now and the subdomain has continued to work too.

I appreciate your help and insights!
Tom

[CreatorRevealed]

@sdayman

Yes it does, it’s a CNAME.

I mean that when u go to that subdomain , there is a message which says that this page is no longer available

[tomhudock]

Thanks @CreatorRevealed . You’re right, the subdomain shouldn’t go to an ugly page like that. That’ll just confuse people.

[sandro]

@tomhudock

SSL is Full Mode.

You currently have a security issue.

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…