You can't really block URLs at a network level though, you'd need access to the device. If you own the device you could of course install the required root cer

You can't really block URLs at a network level though, you'd need access to the device. If you own the device you could of course install the required root certificates to interfere with HTTPS traffic, but arguably that's more intrusive, and a massive security hole if you make a mistake (like Lenovo did, for example).