I fed Cloudflare, Quad9, NextDNS, and AdGuard the same malicious domains to see who actually stops them