The app intercepts DNS requests and only allows previously specified domains through. These allowed DNS request are send via DOH (DNS over HTTPS) to the server specified under settings. All requests are shown in the fresh list and can be swiped to the left to allow and right to permanently block.