Repairing DNS at TLD scale DNS health in .CZ