Browser Guard intercepts all top-level navigation requests and checks if the destination is on your list of trusted domains. If it is not found, the request is blocked, and you're given the option to temporarily or permanently trust the domain.