Predefined content categories block large groups of domains automatically. When you need to block a specific domain that is not covered by a category — or block a site within an otherwise permitted category — the custom block list gives you precise, per-domain control.
Get Started
CleanBrowsing's predefined content categories — Social Media, Gaming, Video Streaming, and others — block large groups of domains automatically. The custom block list is for situations those categories don't cover:
Do not duplicate a predefined category by manually adding its domains to your block list. If the Social Media category is enabled, adding individual social media domains to the block list is unnecessary and makes troubleshooting harder. Use the custom block list only for domains not covered by any active category.
# Verify whether a domain is already blocked by your active categories
# Windows
nslookup the-domain.com 185.228.168.168
# macOS / Linux
dig +short @185.228.168.168 the-domain.comIf the domain returns NXDOMAIN or a block page IP, a predefined category is already blocking it. If it returns a valid IP, the domain is currently allowed and a custom block list entry will block it.
The CleanBrowsing dashboard is the primary way to manage your custom block list. This requires a paid account.
tiktok.com).tiktok.com to block that specific domain and its subdomains.tiktok.com will also block www.tiktok.com and other subdomains under the same root.example.com, not https://example.com.example.com, not example.com/page. DNS filtering operates at the domain level, not the URL path level.If you use multiple profiles (e.g., "Kids" and "Adults"), block lists are profile-specific. A domain blocked in the Kids profile will still be accessible under the Adults profile unless you add it there too. This lets you apply stricter restrictions to one group without affecting another.
The number of custom block list entries depends on your plan: Basic (500 domains), Pro 50 (1,000 domains), Pro 100 and above (1,500+ domains). If you are approaching your limit, consider whether a predefined category covers the domains you are trying to block — enabling the category is more efficient than listing hundreds of individual domains.
Dashboard changes — including custom block list additions — take 30 to 45 minutes to propagate across CleanBrowsing's resolver network. Your device, browser, and OS also cache DNS responses. If a valid (unblocked) response is still cached, the domain will continue to load until the cache expires.
After waiting at least 30 minutes, flush the DNS cache:
# Windows Command Prompt
ipconfig /flushdns
# PowerShell
Clear-DnsClientCache
# macOS
sudo dscacheutil -flushcache
sudo killall -HUP mDNSResponder
# Linux (systemd-resolved)
sudo systemd-resolve --flush-caches
# Linux (nscd)
sudo systemctl restart nscdchrome://net-internals/#dns and click Clear host cache.about:networking#dns and click Clear DNS Cache.edge://net-internals/#dns and click Clear host cache.For detailed instructions, see our Clear DNS Cache in Browser guide.
After adding the domain and flushing your cache, confirm it is now being blocked by CleanBrowsing.
# Windows Command Prompt
nslookup the-blocked-domain.com 185.228.168.168
# PowerShell
Resolve-DnsName -Name the-blocked-domain.com -Server 185.228.168.168
# macOS / Linux
dig +short @185.228.168.168 the-blocked-domain.comA blocked domain will return NXDOMAIN, no response, or a block page IP — not a valid address. If it still returns a valid IP, the block has not propagated yet or the device is not using CleanBrowsing for DNS.
# PowerShell
$domains = @("tiktok.com", "reddit.com", "discord.com")
foreach ($d in $domains) {
$result = Resolve-DnsName -Name $d -Server 185.228.168.168 -ErrorAction SilentlyContinue
$status = if ($result.IPAddress) { "[ALLOWED]" } else { "[BLOCKED]" }
Write-Host "$status $d"
}
# macOS / Linux
for domain in tiktok.com reddit.com discord.com; do
result=$(dig +short @185.228.168.168 $domain)
if [ -z "$result" ]; then
echo "[BLOCKED] $domain"
else
echo "[ALLOWED] $domain"
fi
doneIf you added a domain to the block list but it is still loading, work through these common causes:
This is the most common cause. Dashboard changes take 30-45 minutes to propagate. Wait, flush your DNS cache (Step 3), then test again.
Block lists are profile-specific. Verify the domain is in the correct profile for the device you are testing from.
# Check which profile is active for your IP
nslookup -type=TXT iptest.whois.dnscontest.cleanbrowsing.org 185.228.168.168If the browser has DoH enabled with another provider, it bypasses your network DNS entirely. Your custom block list has no effect. Check and disable DoH in the browser: see How to Disable DNS-over-HTTPS.
Some mobile apps and desktop clients hard-code DNS servers and bypass network DNS entirely. DNS filtering cannot block domains resolved outside your DNS path. For those, consider firewall-level blocking. See Block DNS Bypasses at the Firewall.
Verify the device is routing DNS through CleanBrowsing:
# Windows
ipconfig /all | findstr "DNS Servers"
# macOS
scutil --dns | grep nameserverIf CleanBrowsing IPs are not listed, the device is using a different DNS resolver and the block list has no effect.
tiktok.com
tiktokv.com
muscdn.comNote: the TikTok iOS app may use hard-coded DNS and bypass network-level blocking on mobile devices. For iPhones and iPads, pair DNS blocking with an Apple DNS profile for better coverage.
reddit.com
redd.it
redditstatic.com
redditmedia.comdiscord.com
discordapp.com
discordapp.net
discord.ggyoutube.com
youtu.be
youtubei.googleapis.comNote: blocking YouTube at the DNS level will also block YouTube Music, YouTube Kids, and YouTube TV since they share the same domains.
If you are using SafeSearch enforcement but want to block Bing entirely instead, add:
bing.com
edgeservices.bing.comIf a domain is not in our database and you believe it should be blocked by default for other users, submit it at categorify.org or contact support@cleanbrowsing.org. Adding it to your custom block list gives you immediate coverage on your network while the submission is reviewed.