Just a quick note about that:

> does not have to wait for a DNS resolver to respond

The browser (or the system) caches DNS responses and the query for a blocked domain won't be repeated for quite some time.