Sites without DNSSEC have also been affected. If you could reach any .de page, you had the DNS entries cached.