So many large sites have started serving ads through the hostnames that serve their applications. It feels like a losing battle to keep only blocking at the DNS level.