>In any case, the OP may well be using a local resolver, but they didn't say whether it's resolving recursively or forwarding (e.g. to 8.8.8.8), and I'd bet it's the latter.
It's absolutely not forwarding. It's resolving recursively. I'm using unbound with pfsense and I'm suspecting there is something wrong with it. When I point to MS DNS server or 9.9.9.9, it's resolving correctly.