Verisign has unilaterally broken DNS. Now when you try to resolve the address for a nonexistent domain you no longer get back an error, you get back a record that points to Verisign.
$ whois dnsisbroken.comI can't even begin to explain all the ways this is a bad idea.
No match for "DNSISBROKEN.COM".
$ dig dnsisbroken.com
;; ANSWER SECTION:
dnsisbroken.com. 873 IN A 220.127.116.11