captured some traffic today and found a device making weird DNS requests every 30 seconds. turned out to be smart TV phoning home. blocked it lol