diff --git a/distro/pkg/deb/tests/kdig b/distro/pkg/deb/tests/kdig
index 3e8e58fa0..36e4e542b 100755
--- a/distro/pkg/deb/tests/kdig
+++ b/distro/pkg/deb/tests/kdig
@@ -2,15 +2,10 @@
 
 set -e
 
-expected=93.184.216.34
-answer=$(kdig +short +tls-ca +tls-hostname=dns.cmrg.net @dns.cmrg.net example.org 2>&1 || true)
-
-if [ "$answer" != "$expected" ]; then
-    # fallback to port 443/tcp (in case it cannot reach 853)
-    answer=$(kdig +short +tls-ca +tls-hostname=dns.cmrg.net -p 443 @dns.cmrg.net example.org 2>&1 || true)
-fi
+expected=198.41.0.4
+answer=$(kdig +short +tls-ca @1.1.1.1 -q a.root-servers.net. -t A 2>&1 || true)
 
 if [ "$answer" != "$expected" ]; then
     printf "expected: %s\ngot: %s\n" "$expected" "$answer" >&2
-    kdig +tls-ca +tls-hostname=dns.cmrg.net @dns.cmrg.net example.org
+    kdig -d +tls-ca @1.1.1.1 -q a.root-servers.net. -t A
 fi