Blocking list to add

ray toth if you use only OISD or use NextDNS Ads&Tracking with Allow Affiliate Tracking option those would work great in my opinion.

ray toth I'd also recommend enabling

AI-Driven Threat Detection / Block Newly Registered Domains (NRDs) /  Block Dynamic DNS Hostnames

Basically everything in the Security Tab from my testing and a few others the security aspect is quite great I've tested it personally and recently saw another test done by a Twitter user that was better in terms of how he made his Excel lists etc a lot of work I avoided.

https://twitter.com/brentcrawford/status/1500910925624262657
https://twitter.com/brentcrawford/status/1500935050573013013

OISD only is the easiest to manage and that's why I recommended it on most new threats, the Security Features take care of the New 0-Day Phishing and Malware sites and OISD includes most of the filters with a great whitelist themselves so technically having more could protect you further but with this setup you'll set it once and simply do your browsing just without all the problematic parts of the internet without the need to modify or change anything further.

ray toth

AI is what it sounds like Artificial Intelligence is used to train an algorithm with data containing good and bad sites, so Phishing and generally Malicious websites. From what I've gathered they scan the web on a timely manner with Newly Registered and also domains in general being scanned to see if they are malicious or not.

This gives the advantage of knowing a malicious website before it is seen to a great extent, it's not perfect but it helps with new Malicious sites before they get reported and are included in Threat Intelligence / General Filters.
 

NRD is Newly Registered Domains.

Most of the websites we visit have been registered ever since the existence of the general web and the general adaptation, so from the 70s 80s 90s etc. Newly Registered Domains filter blocks all domains that were created in the last 30 days, that gives the Security Researchers and the general users time to react, so OISD/NextDNS etc gets these into their filters.

It's a simple 0-Day defense that works great for the most part, you can see some new sites that are being blocked but it's extremely rare and having the assurance that most sites that are hosting malicious content will be blocked by the time we get to use them in my mind is a huge bonus and that for me makes it extremely worthy of keeping turned on.

Lastly there is Block Dynamic DNS Hostnames blocking and that blocks domains hosted on DDNS, they explain it far better than I can but it's basically using easy to obtain domains that malicious actors can use to make quick vectors of attack, as most people won't ever really use it as websites, it has no real negative impact from what I know as they don't block the main DDNS host.

Others are all explained in the site and should be turned on by default from what I know unless I turned something else on manually, I would keep them all on since the impact is basically not noticeable as from my experience.

I've been using NextDNS basically a few months after their launch to now with earlier on NextDNS Ads & Tracking and now OISD with recently all the new Beta Features.

I hadn't had to whitelist much personally other than a few edge cases like when I registered a new host name to host a Plex server and that was blocked and one other case where AI blocked something but in terms of daily activities you don't notice it's there. That's why I personally recommend this as it's not there until it either protects you from something malicious or you turn it off and realize there were ads everywhere you went.