Just found out that openspf.org has gone into that big bitbucket in the sky.. And then realized that my dnsbl queries to spamhaus were not being returned by Google's DNS server 8.8.8.8. I switched to 1.1.1.1:
root@tektonic:~# dig 2.0.0.127.zen.spamhaus.org; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> 2.0.0.127.zen.spamhaus.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13115 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;2.0.0.127.zen.spamhaus.org. IN A
;; ANSWER SECTION: 2.0.0.127.zen.spamhaus.org. 41 IN A 127.0.0.2 2.0.0.127.zen.spamhaus.org. 41 IN A 127.0.0.4 2.0.0.127.zen.spamhaus.org. 41 IN A 127.0.0.10
;; Query time: 7 msec ;; SERVER: 1.1.1.1#53(1.1.1.1) ;; WHEN: Thu May 14 08:37:27 2020 ;; MSG SIZE rcvd: 118
root@tektonic:~# dig @8.8.8.8 2.0.0.127.zen.spamhaus.org
; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @8.8.8.8 2.0.0.127.zen.spamhaus.org ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30066 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION: ;2.0.0.127.zen.spamhaus.org. IN A
;; AUTHORITY SECTION: zen.spamhaus.org. 9 IN SOA need.to.know.only. hostmaster.spamhaus.org. 2005141236 3600 600 432000 10
;; Query time: 38 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Thu May 14 08:37:42 2020 ;; MSG SIZE rcvd: 108
last updated 2020-08-16 22:04:26. served from tektonic.jcomeau.com