I am surprised it actually works with DNSSEC validation enabled
Simultaneously rm puntcat, their DNS appears to be down at the moment and I didn't find their own homepage.