So it is likely truly BOGUS = something (maybe malicious) happens on the DNS path for these domains.
- Can you provide which domains fail exactly so we can try to reproduce?
- Which upstream DNS provider do you use? Do you still see the same BOGUS reports if you try, for instance, Google as upstream?