A healthy DNS fallback is two observable transport events: the client receives a UDP reply with the TC (truncated) flag, then repeats the same question to the same server over TCP and receives the complete answer. A timeout by itself proves neither event. If TCP port 53 ...