White paper – Mitigating DNS Zero-Day With Hybrid Architecture