If a website is misclassified as Malware in Palo Alto’s system, on a network running the Palo Alto NextGen firewall system, a DNS call for that site will resolve to sinkhole.paloaltonetworks.com
If you are certain that the host does not contain malware, you can request a categorization change here:
https://urlfiltering.paloaltonetworks.com/