The Curious Case of aa.ns.charter.com
Summary
The post investigates why aa.ns.charter.com appears in a Pi-hole log as a blocked 0.0.0.0 and traces the issue to Charter's DNS zone configuration, specifically an outdated SOA MNAME in the reverse IPv6 zone. It documents the debugging process across Windows Server DNS and AD-integrated zones, identifies the two domain controllers generating the queries, and discusses upstream fixes.