Worth noting that PiHole also resolves CNAMEs and blocks them if they're on your filter list.