WindTre fixed line (Italy): the ISP resolvers don't resolve the netsgroup.com zone (Nets, Nexi group). Any payment flow that redirects to paye.netsgroup.com dies in the browser with NXDOMAIN.
- same names over DoH (1.1.1.1, 8.8.8.8): resolve, AD flag set
- control domains, nets.eu, nexi.it via the ISP resolver: fine
- CPE reboot: no change
Workaround: DoH in the browser.
Raw rcode not captured yet, so filter vs resolver fault is still open. Can anyone on WindTre confirm?
getent hosts netsgroup.com