[Hackman21]

That's a tough one, because in the event of a hijacked domain like this, a lower TTL would also force the "good" settings back faster.