I saw something peculiar the other day. Hallucination? The microsoft.com domain was serving up 192.168.1.0 and 192.168.1.1 as A records in a 7 address round robin.
That’s a spooky reminder to check your rebinding setup — that is, if you’re playing with fire (DNS).
For example, unbound with private-address and private-domain. Then test if DNS rebinding is possible.