speaking of website blocks. over here isps are forced to not only block dns queries, but all packets to ips the blocked website is hosted on. and well, where do you get an up to date list of ips the website is hosted on? you do a dns query.the problem is that the website owner is in control of dns queries, and most of the blocked domains are already expired, so anyone can grab one for cheap.there were a couple of incidents where owners of blocked domains just changed dns records to popular/government websites lol. they eventually "fixed" it by introducing a whitelist for those.