add opendns.com, cloudflare-dns.com, nextdns.io and remove their subdomains
DNS-over-HTTPS. Sometimes, for certain purposes, you might want to block them