@MRamadanAHafiez,
You're just looking at blocked destination addresses, which the firewall will attempt to resolve in the report which is what you appear to be misinterpreting as the domain. You'll want to build a report that actually looks at the URL logs with the URL column actually being utilized. Play around with that and see if that gets you closer to what you actually want to utilize.
I'll caution that if you're just looking to get the domains that you've blocked access to, the firewall can't directly built that sort of report. It will look at each full EURL that it recorded instead of just the domain. If you want to do that detailed of a report, you'll have to offload the data and process the report through something a bit more advanced in capability.
... View more