A record for www is already in there.
I think you just need to keep waiting, because I still see the bad referrals happening. (But less and less often).
DigitalOcean has some wacky anycast stuff powered by Cloudflare, right? it's probably taking a a while because of that.