pihole returns wromng address. For every domain, it returns 10.0.0.2. It seems to correct itself automatically. The upstream servers (google, OpenDNS) seem ok too. Here is log snippet where it corrected itself.
Jun 7 07:00:47 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:47 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:47 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:47 dnsmasq[31576]: query[A] mas-ext.amazon.com from 192.168.1.142
Jun 7 07:00:47 dnsmasq[31576]: forwarded mas-ext.amazon.com to 8.8.4.4
Jun 7 07:00:47 dnsmasq[31576]: reply mas-ext.amazon.com is 10.0.0.2
Jun 7 07:00:49 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:49 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:49 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:51 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:51 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:51 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:53 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:53 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:53 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:55 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:55 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:55 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:56 dnsmasq[31576]: query[A] beacons4.gvt2.com from 192.168.1.137
Jun 7 07:00:56 dnsmasq[31576]: forwarded beacons4.gvt2.com to 8.8.4.4
Jun 7 07:00:56 dnsmasq[31576]: reply beacons4.gvt2.com is 10.0.0.2
Jun 7 07:00:57 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:57 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 18.211.63.211
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 52.5.214.93
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.227.166.18
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.232.8.160
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 54.164.51.255
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 100.25.76.14
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.193.158.194
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.206.28.211
Jun 7 07:00:57 dnsmasq[31576]: query[A] ftv-smp.ntp-fireos.com from 192.168.1.142