[execveat]

You can't block a browser at the DNS level.

[supriyo-biswas]

I meant domains offering downloads of the non-compliant browser/OS; updated. Thanks!