This might be of interest.

https://www.codebgp.com/blog/suspicious-route-against-a-root-dns-prefix/

Kind regards,
Dessalegn