When nslookup resolves a host but curl, pip, and Python fail with "Could not resolve host" on macOS, the mDNSResponder daemon has gone into a non-responsive zombie state. The two-DNS-path diagnosis, the weakest-first fix, and why long-running agent boxes hit it.