[mikecarroll]

I have a feeling the lesson at the end of this is going to involve setting longer TTLs.

[Hackman21]

That's a tough one, because in the event of a hijacked domain like this, a lower TTL would also force the "good" settings back faster.