Depends. Do I want to do a good job, or do I want to comply?
If I just want to comply, I will ask them what to block, and block exactly that, and not care what makes it through. I'm in the network connection business, not the network blocking business, so not my problem if I did what you asked.
If I'm trying to block the service, then watch dns and other traffic on an otherwise clean phone, and block things that are obviously related. If the service still works, start blocking other stuff. Check with other services to make sure they still work. You'll need to test frequently in case they try to avoid blocks.
Sooner or later, you'll have to make hard decisions about collateral damage.
nicsearch 'na bytedance +'
nicsearch 'na tencent +'
Also, add a cron job to update nicsearch's database from the RIRs: nicsearch -download