How to block the transition to sites with a specific domain?

Question

Mikrotik

There is, for example, Mikrotik equipment, and I want to deny access to sites containing * .domain to a certain address list.

Answer 1

Raise a local HTTP proxy and add a blacklist to it. Do not release traffic outside the proxy. The same can be done using a local DNS server, but much less reliably.

Answer 2

Filter requests through L7 , and then cut with a firewall rule. If I understand the problem correctly.