Failure to resolve google related domains via wireguard VPN

I have a fresh Debian 12 VPS that runs dnsmasq, stubby and wireguard so i can have my own VPN.
However for some unknown reason i cannot resolve youtube & google services while connected to the wireguard tunnel from my phone or desktop.
Other apps and domains work fine. If i try to go to youtube.com via firefox i get "Address not found".

I've used the same configs for a few years now on another OS, so rather puzzling why it is not working on Debian.
I've tried a different VPS provider to rule out that google is doing any sort of blocking against the current provider, i've also switched the dns resolver from cloudflare to google, to rule out that maybe it's an issue with cloudflare.

Configs:
dnsmasq.conf - https://paste.debian.net/hidden/2d6562a5/
stubby.yml - https://paste.debian.net/hidden/f1deca77/

I get no errors shown using the drill command so idk what program is to blame in this situation.
UPDATE - so thanks to some awesome help from lunaphyte on #dns irc chan, it seems the phone is having issues with the domain www.youtube.com.
Some commands used to troubleshoot: - https://paste.debian.net/hidden/71188e94/ - https://paste.debian.net/1325358/ - https://paste.debian.net/hidden/5f804f98/
^ you can see here curl does not get any ipv4 addresses. - https://paste.debian.net/hidden/53a8f70d/
^ here it just timed out.

Here's the results of ping and curl on another VPS (non-debian) using the same configs:

curl - https://paste.debian.net/hidden/e24adeaf/
ping - https://paste.debian.net/hidden/0c7c0775/

Statistics: Posted by cmm11 — 2024-08-03 14:14 — Replies 0 — Views 38

---