For the cash back sites, I have a separate Firefox profile that uses a public DNS over HTTPS provider to bypass my internal DNS.
That's a good workaround, did not consider it before.