Browser says NXDOMAIN, but dig command show NOERRORS in unbound

I am using this pihole+unbound container: One container. But, page isn't loading. I disabled the block list but unbound still not resolving. Then, disabled blocklist and selected google ecs on dns section all pages loads correctly. Some sites are not loading in the browser. Such as:
who.int
Running dig command from my mac shows:

dig who.int

; <<>> DiG 9.10.6 <<>> who.int
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26734
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;who.int.			IN	A

;; ANSWER SECTION:
who.int.		691	IN	A	104.17.113.188

;; Query time: 56 msec
;; SERVER: 192.168.88.5#53(192.168.88.5)
;; WHEN: Sat Apr 03 01:13:56 +06 2021
;; MSG SIZE  rcvd: 52

And from my pihole host machine shows:

dig who.int

; <<>> DiG 9.11.5-P4-5.1+deb10u3-Raspbian <<>> who.int
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8088
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;who.int.			IN	A

;; ANSWER SECTION:
who.int.		616	IN	A	104.17.113.188

;; Query time: 0 msec
;; SERVER: 192.168.88.5#53(192.168.88.5)
;; WHEN: Sat Apr 03 01:15:11 +06 2021
;; MSG SIZE  rcvd: 52

But, my browser shows DNS_PROBE_FINISHED_NXDOMAIN

Hub Docker

From my mac it shows:

dig hub.docker.com

; <<>> DiG 9.10.6 <<>> hub.docker.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43524
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;hub.docker.com.			IN	A

;; ANSWER SECTION:
hub.docker.com.		80	IN	CNAME	elb-default.us-east-1.aws.dckr.io.

;; Query time: 54 msec
;; SERVER: 192.168.88.5#53(192.168.88.5)
;; WHEN: Sat Apr 03 01:18:57 +06 2021
;; MSG SIZE  rcvd: 90

From pihole host machine:

dig hub.docker.com

; <<>> DiG 9.11.5-P4-5.1+deb10u3-Raspbian <<>> hub.docker.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42418
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;hub.docker.com.			IN	A

;; ANSWER SECTION:
hub.docker.com.		263	IN	CNAME	elb-default.us-east-1.aws.dckr.io.
elb-default.us-east-1.aws.dckr.io. 197 IN CNAME	us-east-1-elbdefau-1nlhaqqbnj2z8-140214243.us-east-1.elb.amazonaws.com.
us-east-1-elbdefau-1nlhaqqbnj2z8-140214243.us-east-1.elb.amazonaws.com.	18 IN A3.216.110.191
us-east-1-elbdefau-1nlhaqqbnj2z8-140214243.us-east-1.elb.amazonaws.com.	18 IN A3.216.167.12
us-east-1-elbdefau-1nlhaqqbnj2z8-140214243.us-east-1.elb.amazonaws.com.	18 IN A3.229.58.91

;; Query time: 163 msec
;; SERVER: 192.168.88.5#53(192.168.88.5)
;; WHEN: Sat Apr 03 01:21:14 +06 2021
;; MSG SIZE  rcvd: 219

hub.docker.com also shows DNS_PROBE_FINISHED_NXDOMAIN
Any help to resolve these issues will be highly appreciated. During this tests I kept all pihole blocklists disabled.

Issues · chriscrowe/docker-pihole-unbound · GitHub

1 Like