Weird sites in logs
There are a lot of radical sites showing up in my logs when using nextDNS and Mulvad (via the DNS settings). I see them on the dashboard for nextDNS and sometimes in my own website data for Safari (but not all). It doesn't really make sense why I would go to visitdprk dot com, 4chan, a bunch of patriot websites and halalexpo dot jp. I don't know which service is to blame for this but it's worrying.
I've actually recovered my device because it was so alarming. Not sure what else to do.
First of all I would say check the IPs in your Analytics page, you said you use a VPN so it might be a bit difficult but maybe clear the logs and see what IPs hit it. If you shared an image of your NextDNS ID someone might have just used it, could happen. Lastly it might be some webpage you visit. For example just a few days ago I was on site to get fresh AD servers (just to see what filter blocks them faster) and I had the website hit up many Local girls in your area sites and some NSFW pages even some popups so it could be because of a malicious / iffy site.