@jacksonchen666 Ah. Don't know about DNSSEC but internetbs.net (the one I typically use) seems to tick (almost) all of the boxes otherwise - they did get bought by Team Internet at some point, but I haven't seen any service changes in the years since.
@joepie91 thanks, did notice it uses cloudflare (https://checkforcloudflare.selesti.com/) but i'll look into it anyways