Network access and allow-listing

Why a filter may block us

Let Money Grow™ is a young domain that teaches personal finance, tax, insurance and business ownership. Web-filtering vendors often place new finance or education sites in an "uncategorised" or "newly registered domain" bucket by default, and many corporate VPNs block that bucket outright. It is not a malware, phishing or reputation problem.

Pages that discuss digital assets or mining economics can also trip a "cryptocurrency" rule. Let Money Grow™ does not issue a token or coin, does not run a wallet, and does not sell or exchange any cryptocurrency. Those pages are educational only.

Security posture

The site is served only over HTTPS (TLS 1.2+) with HSTS enabled, sits behind a global CDN with DDoS protection, and sets standard protective headers including X-Content-Type-Options and a strict referrer policy.

Accounts use email or Google sign-in with per-user database access rules; card details never touch our servers because payments are handled by Stripe. There is no advertising network, no session-replay recording and no third-party tracking pixel on the site.

A security contact is published at /.well-known/security.txt. Data handling is described in the Data Protection Policy.

Suggested category

Education / Personal Finance / Business and Economy. We are not a trading platform, broker, exchange, gambling site or adult content site.

Domains to allow

Allowing the first three is enough to browse and read everything. The rest are only needed for sign-in, payments, fonts and the AI guide.

Traffic is standard HTTPS on port 443. We publish no fixed IP addresses because the site is served from a global CDN; please allow by hostname rather than by IP.

If the block says "Newly Registered and Observed Domains"

This is the most common block we see, and it is not a safety warning about our site. Filters such as Zscaler place every recently registered domain into a "Newly Registered and Observed Domains" bucket for a set period (often 30 to 90 days) regardless of content, and many companies block that whole bucket by default. Nothing is flagged against letmoneygrow.com — we are simply a young domain.

There are two ways your IT team can clear it: add letmoneygrow.com and www.letmoneygrow.com to the URL allow-list, which works immediately and overrides the newly-registered rule, or submit us for re-categorisation as Finance and Insurance / Education, which removes us from the bucket permanently. Both are routine changes. Until then, the site is reachable from a personal device or home network.

Ask your IT team for this

"Please allow letmoneygrow.com (and www.letmoneygrow.com) through the web filter and VPN. It is currently blocked under the 'Newly Registered and Observed Domains' category, which applies to the age of the domain rather than its content. It is a personal finance education site that belongs in Education / Personal Finance. Details for review are at https://letmoneygrow.com/network-access."

Vendor-specific notes

Zscaler: Zscaler's public lookup tool is now available to Zscaler customers only, so the blocked user's own IT or security team must look up and re-categorise us. From the block page they can click "Request review", or sign in to sitereview.zscaler.com, look up letmoneygrow.com and suggest the category "Finance and Insurance" or "Education". While waiting, they can add letmoneygrow.com to their URL allow-list — a one-line change that takes effect immediately. If the block page names "Newly Registered and Observed Domains", the allow-list entry is the fastest fix, because that rule is based on domain age and will keep blocking us until re-categorisation is approved.

Other vendors: Fortinet (FortiGuard), Palo Alto Networks, Cisco (Umbrella/Talos), Symantec/Broadcom, Forcepoint, Netskope and Trellix all accept public category-review requests through their web-filter portals. If you email us the block message, we will submit the re-categorisation request on your behalf.

If only some pages fail: that usually means the AI guide or sign-in domains are filtered. Ask IT to also allow the account, AI and payment domains listed in the table above.