diff --git a/etc/unbound/unbound.conf.d/blocklist.conf b/etc/unbound/unbound.conf.d/blocklist.conf
index a110b5e4..46247c27 100644
--- a/etc/unbound/unbound.conf.d/blocklist.conf
+++ b/etc/unbound/unbound.conf.d/blocklist.conf
@@ -4,7 +4,8 @@ server:
 # separate DNS.
 local-zone: "use-application-dns.net." always_nxdomain
 
-# I have something very aggressively attempting to resolve these two domains
+# I have something very aggressively attempting to resolve Google Analytics
 # and errorring on DNSSEC due to upstream resolver blocking them.
 local-zone: "google-analytics.com." always_nxdomain
+local-zone: "ssl.google-analytics.com." always_nxdomain
 local-zone: "www.google-analytics.com." always_nxdomain