Inconsistent CNAME blocking?

Well, maybe not. @jpgpi250 is still seeing issue(s) so I'm not yet done. Don't misunderstand me, I was busy this weekend. I do appreciate @jpgpi250's tries to "destroy" Pi-hole using an uncommon configuration. A properly working code should be fully deterministic so there is still at least a cache hiccup which we should resolve before sending this code towards release/v5.0.

I'd need more line, also from some blocked queries so I can investigate the difference. I have no Windows Pcs available at home and, strangely enough, failed to reproduce your issue previously with manually triggered queries for www.msn.com.