I think the alerts would have to be at a higher level hierarchy than plain URLs or domains.

I'm imagining a categorized whitelist of domains based on purpose (essential, telemetry, ads) which the user would choose from at first run, and the program would just block the other domains without asking again and again.