It appears from above log entry this domain is on the "Blacklist".
Check your blacklist!
Also excessive NTP querying might be related to a recent openresolv
package change that comes with Raspbian/Pi-OS Bullseye and maybe also Debian and derivatives:
You would be affected if you have below similar lines in unbound
's configuration: