Safe search is a list of set IP addresses that is meant to pre-enable the
safe search of search portals.
This zone file contains all known IP to spoof safe search enabled search sites
There are different approaches of spoof domains depending on the resolver used
For example in PowerDns Dnsdist you will do it like this:
In standard RPZ you will do it like this:
duckduckgo.com IN CNAME safe.duckduckgo.com
In unbound you need to assign IP spoofing like this
local-zone: "duckduckgo.com." redirect local-data: "duckduckgo.com. IN CNAME safe.duckduckgo.com."
In hosts file you forced to have a tremendous big list of IP host like this
22.214.171.124 duckduckgo.com 126.96.36.199 duckduckgo.com 188.8.131.52 duckduckgo.com