DNS format error

[Yang Yu]

On Wed, Jul 29, 2015 at 2:17 AM, Lightner, Jeff
<JLightner at dsservices.com> wrote:
> http://www.vip.icann.org/DS?
Your email client made it a hyperlink, not me. That's the response for
DS record.

>>>
I configured bind to forward queries to 8.8.8.8

dig www.vip.icann.org ds @8.8.8.8 returns SERVFAIL (NOERROR with +cd),
but 4.4.4.4 and 208.67.222.222 returns NOERROR

the query error log can be replicated with "dig www.vip.icann.org ds"
This sounds like a DNSSEC validation issue, but why would I get DNS
format error in the log

still not sure why the browser tried to get ds record for
www.vip.icann.org in first place (I am unaware of any subdomains in
www.vip.icann.org), probably DNS prefetching?