Inspect global A, AAAA, MX, TXT (SPF/DKIM/DMARC), and NS records directly from authoritative root servers.