I mean most of the time said company resolvers have a service that block either suspicious requests, or only allow whitelisted domains.