I don't have anything Android to test on, but this article, while aimed at blacklisting, can be used in the exact same manner to determine domains to whitelist.