Thanks for the heads up!
We did make a DNS change the other day, and I enabled DNSSEC as part of the change (thinking that if I toggled the “use DNSSEC” button in our DNS provider that it would do all the Right Magic to make it work… apparently that was a false assumption!).
So I just disabled DNSSEC and now everything appears to be normal again.