Container based FQDN addition- Anomaly behaviour

Hi PrakashRIndia, 

This is an interesting scenario.

From what I understand, Malicious domains are blocked in Cato.
This can be validated using the "Domain Lookup": https://support.catonetworks.com/hc/en-us/articles/8664662042141-Identifying-the-Category-for-a-Domain 
Would you like to take a look on this?

Moving forward, can we double-check if a certain malicious domain was found to be not blocked by Cato?

Cheers