They probably have a newly registered domain rule.

Seems like .blog .city etc are just banned via cisco umbrella policies...