PSA for network admins: Note that use-application-dns.net must return NXDOMAIN, not (successfully) resolve to 0.0.0.0. I see plenty of people just adding it to

PSA for network admins: Note that use-application-dns.net must return NXDOMAIN, not (successfully) resolve to 0.0.0.0. I see plenty of people just adding it to their hosts file blacklists / DNS overrides like they do for other ad and malware domains, such that it resolves to a bad IP like 0.0.0.0. That's not what you should be doing in this case.