Yes, NordVPN blocks malicious websites once the CyberSec feature gets enabled. Also, you don’t have to be connected to a VPN to allow CyberSec to do its job.