Most ad services now swap their ad JS domains frequently, aggregate snippets (ads and functional) over a Tag Manager, or simply even proxy the ad scripts through the main domain, which a DNS filter cannot block reliably.