diff --git a/etc/unbound/unbound.conf.d/well-known-dns.conf b/etc/unbound/unbound.conf.d/well-known-dns.conf
index 64823b73..d56450ed 100644
--- a/etc/unbound/unbound.conf.d/well-known-dns.conf
+++ b/etc/unbound/unbound.conf.d/well-known-dns.conf
@@ -55,6 +55,8 @@ server:
 	local-data: "cloudflare-dns.com. A 1.0.0.1"
 	local-data: "cloudflare-dns.com. AAAA 2606:4700:4700::1111"
 	local-data: "cloudflare-dns.com. AAAA 2606:4700:4700::1001"
+	local-zone: "one.one.one.one." typetransparent
+	local-data: "one.one.one.one. CNAME cloudflare-dns.com."
 # Cloudflare Malware blocking
 	local-zone: "security.cloudflare-dns.com." typetransparent
 	local-data: "security.cloudflare-dns.com. A 1.1.1.2"
@@ -77,6 +79,8 @@ server:
 	local-data: "dns.google. A 8.8.4.4"
 	local-data: "dns.google. AAAA 2001:4860:4860::8888"
 	local-data: "dns.google. AAAA 2001:4860:4860::8844"
+	local-zone: "dns.google.com." typetransparent
+	local-data: "dns.google.com. CNAME dns.google."
 # Google DNS64
 	local-zone: "dns64.dns.google." typetransparent
 	local-data: "dns64.dns.google. AAAA 2001:4860:4860::6464"