I had a client pissed at us because a domain he registered in November and was working on a couple of days ago in January, is suddenly blocked. When I investigated, I found that the domain was classified as "Newly Seen Domains". That would make sense if it was blocked the first time it was seen, but why did it work fine for a couple of days before being blocked? That seems to go against the purpose of the "Newly Seen Domains" classification altogether.
The Umbrella reports clearly show him accessing the domain from the same PC and it being allowed for the past two days, right up until this morning.
