Yeah already did that but I couldn't pint point it exactly, as I see everyquery getting either forwarded to 127.0.0.1 for a reply or forwarded to my smart dns up and replied to. Nothing out of the ordinary 
Looks like Netflix is using doh now on Samsung smart TV according to a user on Reddit
https://www.reddit.com/r/pihole/comments/ceg5az/samsung_tv_netflix_subverting_local_dns/