Dnsmasq can return nxdomain responses
echo 'server=/.example.tld/' >> /etc/dnsmasq.conf
Check dnsgate [2] or FreeContributor [3]
[1] https://www.dnsknowledge.com/whatis/nxdomain-non-existent-do...
[2] https://github.com/jakeogh/dnsgate
[3] https://github.com/tbds/FreeContributor