This is a very incomplete list of domains that should be excluded from requests to public DNS servers or DNS servers behind VPN connections so that such requests are routed to the locally assigned DNS server. This should secure that access to captive portals, connectivity checks, and local network devices remain functional at all times.