[aix1]

Could you give an example of what you mean by a "bad address" in this context?

[lowbloodsugar]

This is from the time of incident:

Server: 1.1.1.1 Address: 1.1.1.1#53

Non-authoritative answer: Name: newegg.com Address: 23.35.185.6

vs

Server: 8.8.8.8 Address: 8.8.8.8#53

Non-authoritative answer: Name: newegg.com Address: 104.80.92.252

104.80.92.252 is newegg.com

23.35.185.6 is a server that provides an error message.

So 1.1.1.1 lied. The proper response would be to reply "I don't recognize that domain". Instead it said, "yeah, I know that, its here..."

Newegg was not down, and when I got macos to forget what it had cached from 1.1.1.1 I was able to use newegg.com fine.