When trying to access a website with a subdomain, you get the Web Gateway block page. Upon further investigation, you find that SafeWeb has blocked the base domain, not the subdomain.
The custom report shows an event like this:
08/04/20xx 08:33 PC1 domain.com Critical Spyware Web Site domain.com Blocked Test Policy Malware URL www.domain.com/Login.do?action=login
The Web Gateway will block any subdomains of a domain listed as Unsafe on Norton SafeWeb