Creating a static URL filter to block download.com specifically allows blocking that site without affecting the entire category. Using a separate firewall policy with a Deny action for an FQDN address object matching download.com can also block the site while allowing others in the same category.