Hi Lawrence. Thanks for the reply.
This customer prefers that identifiable information not be posted in public forums, but I setup an unused domain to demonstrate the source of my question.
Domain: finburg.com
NS: ns5.pairnic.com
MX: gmail-smtp-in.l.google.com
MX IP: 74.125.142.27 (depending on when you ask)
The DNS Report uses 216.92.3.110 for the IP of the mail server. It seems that it is getting this IP from ns5.pairnic.com. Is it correct that the DNS Report is asking this directly?
That pairnic.com NS is not recursive. It provides the same address for all unknown domains - which is how they explained they deal with parked domains. So, I guess they are parking all of the domains for which they are authoritative by default - until a customer makes/requests a change.
It doesn't look like GoDaddy or eNom does this. So, maybe it's bad behavior by the registrar's DNS and the DNS Report?