perhaps you should unblock specific domains in that case

but i’d also suggest a blocker that uses auto-updated lists rather than whole gTLDs; they’re likely to catch more and deny fewer false positives