Website blocked due to a suspicious top level domain (TLD)

Malwarebytes Browser Guard is a free browser extension that acts as an additional layer of security specifically for your web browsing. I install it for many of my clients because it offers extra security that's not built into Chrome, Edge or Firefox so that you can surf safely on the world wide web.

One disadvantage of this plugin is that its gTLD domain blocking feature is a bit overzealous in blocking some legitimate sites, and said feature needs to be disabled in these cases. My own sites, including this site and my scheduling site, are falsely identified as "suspicious top level domains" when this feature is turned on.

If you're using Malwarebytes Browser Guard and you're seeing "Website blocked due to a suspicious top level domain (TLD)" on a site like mine that you know and can trust, I can explain what you're seeing and the reasoning behind it. Here's a breakdown:

What's blocked and why:

• gTLD (generic Top Level Domain): This refers to the ending part of a website address, like ".com", ".org", or the one you encountered that triggered the block. Malwarebytes Browser Guard flagged the site because some new or less common gTLDs are statistically more likely to be used by malicious websites.
• Heuristics: This is a technique security software uses to identify potential threats based on patterns and indicators. In this case, the unusual gTLD is the red flag.

Why it might be a false positive:

• Legitimate new gTLDs:  While some less common gTLDs are associated with risk,  legitimate businesses can use them too.

Before disabling Browser Guard's gTLD blocking:

• Consider the risk:  Malicious websites can steal information, infect devices with malware, or trick you into giving them money. Disabling this security feature exposes you to these risks.
• Is the site trustworthy?  If it's a website you know and trust, there are ways to access it safely (explained below).

How to access the website safely (if you trust it):

• "Continue to Site" option (if available):  Malwarebytes Browser Guard often provides a "Continue to Site" option with a warning. If the site that's being blocked is a legitimate one (like mine), be sure to check the box next to "Do not block this site again" before you click on "Continue to this website" and you won't see the message again.
• Check website reputation: Use a service like VirusTotal to see if the website has been flagged by other security vendors.  A clean report doesn't guarantee safety, but a bad report is a warning sign.

If you're sure the website is safe and want to keep gTLD blocking on:

• Report the block to Malwarebytes: They can investigate and potentially whitelist the safe site. You can find instructions on Malwarebytes forums.

Malwarebytes needs to spend more time on whitelisting legitimate websites. While gTLD blocking can be inconvenient at times, it's a security layer that helps protect you from malicious websites.  If you trust a blocked site, proceed with caution using the temporary access methods or report the block to Malwarebytes for investigation.

Still Experiencing These Issues?
Schedule Appointment