An example I remember is when Virgin Media replaced any DNS queries returning NXDOMAIN with their own "search page" plastered with ads.

https://shkspr.mobi/blog/2021/03/advanced-network-error-sear...

Ah, yes, I forgot the NXDOMAIN hijacking.

I was thinking about interfering with existing sites.