diff --git a/settings.php b/settings.php
index 9faaf678..0b877114 100644
--- a/settings.php
+++ b/settings.php
@@ -836,7 +836,7 @@ if (isset($_GET['tab']) && in_array($_GET['tab'], array("sysadmin", "blocklists"
                                                    queries, Pi-hole requests the DNSSEC records needed to validate
                                                    the replies. If a domain fails validation or the upstream does not
                                                    support DNSSEC, this setting can cause issues resolving domains.
-                                                   Use Google, Norton, DNS.WATCH, Quad9, or another DNS
+                                                   Use Google, Cloudflare, DNS.WATCH, Quad9, or another DNS
                                                    server which supports DNSSEC when activating DNSSEC. Note that
                                                    the size of your log might increase significantly
                                                    when enabling DNSSEC. A DNSSEC resolver test can be found