Block domains that resolve to malicious IPs like Control D

Asked and rejected in july 2019, see here, read the arguments...

edit
I now use pfsense + pfBlockerNG (the IP part only) to achieve IP address based blocking.
/edit