[raverbashing]

This would be my suggestion as well

Also might be useful to get a hosts file mapping bad domains to localhost

[xd1936]

Or block them at the DNS level for the whole network with something like Pihole[1]

[1] https://github.com/pi-hole/pi-hole

[walrus01]

opendns

[raverbashing]

Yes, but you want that configured outside of the machine preferably (and maybe block other DNS servers)