diff --git a/etc/unbound/unbound.conf.d/blocklist.conf b/etc/unbound/unbound.conf.d/blocklist.conf
index 5f7287c6..40062fc6 100644
--- a/etc/unbound/unbound.conf.d/blocklist.conf
+++ b/etc/unbound/unbound.conf.d/blocklist.conf
@@ -7,10 +7,10 @@ local-zone: "use-application-dns.net." always_nxdomain
 
 # I have something very aggressively attempting to resolve Google Analytics
 # and errorring on DNSSEC due to upstream resolver blocking them.
-local-zone: "google-analytics.com." always_nxdomain
-local-zone: "ssl.google-analytics.com." always_nxdomain
-local-zone: "www.google-analytics.com." always_nxdomain
+local-zone: "google-analytics.com." always_refuse
+local-zone: "ssl.google-analytics.com." always_refuse
+local-zone: "www.google-analytics.com." always_refuse
 
 # On top NextDNS blocks after Google Analytics, while I am not entirely sure
 # blocking it is in my interests.
-local-zone: "incoming.telemetry.mozilla.org." always_nxdomain
+local-zone: "incoming.telemetry.mozilla.org." always_refuse