DNSSEC saves the “eth.limo" domain from being hijacked:
https://easydns.com/blog/2026/04/18/we-screwed-up-and-we-own-it-the-eth-limo-shtshow-is-on-us/
As this was a social engineering attack, the attacker could have changed the DS-record in the “limo" TLD as well, but did not know or forgot …


