yeah that’s what I thought, that the bad stuff was blocked anyway so I wasn’t worried. Thanks for the comment though, that confirms the web shield behavior I imagined.
I would have thought that the google.com/ mask would work (any character/s before google.com/ and any character/s after it), I tried that and it works. So that would work for sub-domains also.
My suggestion was more to get round the problem Scott found when he only entered www. at the start and found he needed http: // www, etc. than to exclude look alike sites. So www . google.com/ without spaces, would cover the thisisntgoogle.com.