@b0rk yes their own servers. the configuration errors were "stupid" enough that I'd imagine anyone seriously running a DNS hosting service would have them easily automated away, and easily detectable with automatic monitoring (eg... check the SOA records for all servers for all zones)