Alright good to know. Based on the content of w3.org I first thought false positive.
I had also added the w3.org IP to the firewall which was blocking it in the same sequence as the web filter. The repetition seemed off for normal behavior, yet again it seemed relatively clean.
If it continues categorizing it as "Spam" and thus blocking it, what can be done to keep it from filling up the event viewer?