Changing a hostname's DNS answer so validation observes one address while a later connection reaches another.