@aral DNSVIZ reports no issues: https://dnsviz.net/d/kittens.small-web.org/ZVY34g/dnssec/
You could try to send SIGUSR1 to resolved when the failure occurs, that makes resolved dump info on its upstreams.
You could also enable tracing in systemd-resolved to see if the problem is systemd-resolved or further upstream. Tracing can be enabled by creating a service override and restarting systemd-resolved.
```
[Service]
Environment=SYSTEMD_LOG_LEVEL=debug
```
076萌SNS is a social network, courtesy of 076. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.
All 076萌SNS content and data are available under the Creative Commons Attribution 3.0 license.