@Sylvhem some websites were temporarily hijacked to serve malware, they've all been reset now

https://www.theregister.co.uk/2017/07/13/swiss_domain_name_hijack/ and https://news.gandi.net/en/2017/07/detailed-incident-report/

only some TLDs were affected, there's a list at the bottom of: https://news.gandi.net/en/2017/07/report-on-july-7-2017-incident/