I don't recall seeing HTTP traffic in the trace during TV startup and update check, so it's got to be a tunnel or internal. I'd read reports of some smart TV's

I don't recall seeing HTTP traffic in the trace during TV startup and update check, so it's got to be a tunnel or internal. I'd read reports of some smart TV's having internal resolvers, hence my guess at that. I'll have to take another look though. If there's a DoH host I could block, that'd be nice.