diff --git a/etc/unbound/unbound.conf.d/blocklist.conf b/etc/unbound/unbound.conf.d/blocklist.conf
index 4309a1ad..452a829f 100644
--- a/etc/unbound/unbound.conf.d/blocklist.conf
+++ b/etc/unbound/unbound.conf.d/blocklist.conf
@@ -2,16 +2,13 @@
 
 # Riot.im communicates with the domains below a bit too happily. These are
 # a bit controversial, so I am keeping them commented in git.
-#local-zone: "matrix.org" static
-#local-zone: "modular.im" static
+#local-zone: "matrix.org." always_nxdomain
+#local-zone: "modular.im." always_nxdomain
 # I have seldom need to access vector.im, while the above, especially
 # matrix.org I actally need at times for documentation.
-local-zone: "vector.im" static
-
-# THROWAWAY
-local-zone: "publicbt.com" static
+local-zone: "vector.im." always_nxdomain
 
 # Tell Firefox to not automagically send traffic to Cloudflare as there is
 # this Unbound using DNS-over-TLS / DNSCrypt without the need for it to use
 # separate DNS.
-local-zone: "use-application-dns.net" static
+local-zone: "use-application-dns.net." always_nxdomain