Dig returns incorrect DNS record, but only on specific network. What's wrong?

Since you are querying the authoritative server directly, caching should not be a factor.

I see two main options:

  • ns3.he.net is anycast (which I believe is the case) and some anycast node(s) are out of sync. This would only make sense as an explanation if the record had the value 18.204.152.241 at some point, though.
  • Your ISP, you, or potentially someone else is intercepting DNS in/from your network and providing different answers.