Thanks everyone - we use nakedssl for domain redirection since heroku doesn't support it. This is something we do commonly, nothing out of the ordinary. That's the reason the naked domain resolves to a different ip address.
2 Likes