Turns out firefox uses DNS over HTTPS to resolve DNS names (if enabled), maybe you want to turn that of and check if it changes anything. https://wiki.mozilla.org/Trusted_Recursive_Resolver