diff --git a/dns_compare.py b/dns_compare.py
index bb4cde7..6db9f72 100755
--- a/dns_compare.py
+++ b/dns_compare.py
@@ -102,24 +102,42 @@ def perform_query(full_domain, ns, record_type, timeout):
         # Add EDNS0 extension for better compatibility (like dig does)
         q.use_edns(edns=0, ednsflags=0, payload=4096)
         
-        # Try TCP first for better compatibility with some servers
+        # Try UDP first
         try:
-            r = query.tcp(q, ns, timeout=timeout)
-            if args.verbose:
-                print(f"[DEBUG] TCP Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
-        except Exception as e:
-            # Fall back to UDP if TCP fails
-            if args.verbose:
-                print(f"[DEBUG] TCP failed ({e}), trying UDP...", file=sys.stderr)
             r = query.udp(q, ns, timeout=timeout)
+            if args.verbose:
+                print(f"[DEBUG] UDP Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
             
             # If UDP returns truncated, retry with TCP
             if r.flags & flags.TC:
                 if args.verbose:
                     print(f"[DEBUG] UDP Response truncated (TC flag set), retrying with TCP...", file=sys.stderr)
+                try:
+                    r = query.tcp(q, ns, timeout=timeout)
+                    if args.verbose:
+                        print(f"[DEBUG] TCP Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
+                except Exception as tcp_error:
+                    # Fall back to TLS if TCP fails
+                    if args.verbose:
+                        print(f"[DEBUG] TCP failed ({tcp_error}), trying TLS...", file=sys.stderr)
+                    r = query.tls(q, ns, timeout=timeout)
+                    if args.verbose:
+                        print(f"[DEBUG] TLS Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
+        except Exception as udp_error:
+            # Fall back to TCP if UDP fails
+            if args.verbose:
+                print(f"[DEBUG] UDP failed ({udp_error}), trying TCP...", file=sys.stderr)
+            try:
                 r = query.tcp(q, ns, timeout=timeout)
                 if args.verbose:
-                    print(f"[DEBUG] TCP Retry Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
+                    print(f"[DEBUG] TCP Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
+            except Exception as tcp_error:
+                # Fall back to TLS if TCP fails
+                if args.verbose:
+                    print(f"[DEBUG] TCP failed ({tcp_error}), trying TLS...", file=sys.stderr)
+                r = query.tls(q, ns, timeout=timeout)
+                if args.verbose:
+                    print(f"[DEBUG] TLS Response: Answer={len(r.answer)} RRsets, TC flag: {bool(r.flags & flags.TC)}", file=sys.stderr)
         
         # Verbose debugging
         if args.verbose: