Reply to post:

As a former Palo Alto Networks firewall admin, we set any requests to domains less than 30 days old to be gated by a block/continue warning page, so users would be forced to hesitate before proceeding to the destination site. It worked a treat!