Cleanfeed has two filters. Thr first is IP/domain based and if the site is on the list then all the traffic will go through a proxy or deep packet inspection to check each URL accessed against the blocklist. Detecting/Sourcing the second level is much harder.