@aral DNSVIZ reports no issues: https://dnsviz.net/d/kittens.small-web.org/ZVY34g/dnssec/
You could try to send SIGUSR1 to resolved when the failure occurs, that makes resolved dump info on its upstreams.
You could also enable tracing in systemd-resolved to see if the problem is systemd-resolved or further upstream. Tracing can be enabled by creating a service override and restarting systemd-resolved.
```
[Service]
Environment=SYSTEMD_LOG_LEVEL=debug
```
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.