diff --git a/configuration/kresd.conf b/configuration/kresd.conf
index 531e6c0..c39611f 100644
--- a/configuration/kresd.conf
+++ b/configuration/kresd.conf
@@ -31,3 +31,4 @@ policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-regional
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/urlhaus-abuse_ch.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-xtreme.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/blahdns.rpz',true))
+policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/minop-cname-cloaking.rpz',true))
diff --git a/download-filters.sh b/download-filters.sh
index 11bc2fe..4a1edd1 100644
--- a/download-filters.sh
+++ b/download-filters.sh
@@ -9,4 +9,5 @@ wget -O /etc/knot-resolver/list/energized-regional.rpz https://block.energized.p
 wget -O /etc/knot-resolver/list/energized-xtreme.rpz https://block.energized.pro/extensions/xtreme/formats/rpz.txt
 wget -O /etc/knot-resolver/list/blahdns.rpz https://oooo.b-cdn.net/blahdns/blahdns_rpz.txt
 wget -O /etc/knot-resolver/list/urlhaus-abuse_ch.rpz https://urlhaus.abuse.ch/downloads/rpz
+wget -O /etc/knot-resolver/list/minop-cname-cloaking.rpz https://github.com/minoplhy/dnsBlocklist/raw/main/rpz/cname-cloaking.rpz
 exit