NetGuard. Creates a local VPN through which the internet is routed. Shows the domains each app is accessing, can be blocked per app, or forbid internet at system level (breaks things, require fine tuning).
Also you can configure a non standard DNS (like adguard, which can block some things at the DNS level).
EDIT: or NextDNS, since it comes with some additional features.