I have a domain that is country specific that could technically be considered a second-level domain, in October I started having close to a million queries every day and was forced to move to Cloud Flare as I hit my monthly quote at DNS Made Easy in a few days. This is a domain with no website other then a blank page and at most gets 50-60 visits a day.
All the queries are random looking and hitting what looks like generated subdomains at *.domain.tld from different countries. I did add a catch all *.domain.tld to 127.0.0.1 but doesn’t look like it’s helping.
Today at 3:17am (EDT) it hit close to 533k queries, at 3:18 1.3 million queries per minute and 1.26 million queries at 3:19 and then it slowed down to about 1+k per minute.
Any ideas what are my options? most likely a misconfig somewhere at big ISP or some very popular software that has messed up something.