As already mentioned the URL filtering is based on the the contents of the actual http request. However in PA there is also a DNS-proxy feature which I think might be able to be used to sinkhole various domains, see some info in The admin guide has a better description regarding settings of the dns-proxy feature. In my opinion the best option is to use your own dns-servers (place in DMZ) and perform the sinkholing in them.
... View more