The issue causing this is documented here:
I would like to change it so letter avatars are all served via the rails app which can be a lot smarter about dealing with a problem DNS entry an so on.
Just blanket failing to load NGINX cause avatars.discourse.org is not something we can allow.