This was cached on one our name servers. Sure enough, dig any com
A customer of one of our downstreams seems to be responsible for this.
His site is off the net until his DNS can be fixed.
Operational question: is there anything you all would tell your
customers about something like this besides "read DNS AND BIND and
don't misplace the clue next time?"