Here we go:
regex domainFacebook "\.facebook\.com"
regex domainMyspace "\.myspace\.com"
regex domainTwitter "\.twitter\.com"
regex domainYoutube "\.youtube\.com"
regex domainDailymotion "\.dailymotion\.com"
class-map type regex match-any block-for-80-to-89
match regex domainFacebook
match regex domainMyspace
match regex domainTwitter
class-map type regex match-any block-for-90-to-99
match regex domainFacebook
match regex domainMyspace
match regex domainTwitter
match regex domainYoutube
match regex domainDailymotion
class-map type inspect http match-all block-80-89-class
match request header host regex class block-for-80-to-89
class-map type inspect http match-all block-90-99-class
match request header host regex class block-for-90-to-99
access-list match-80-89-acl permit tcp 192.168.2.80 255.255.255.248 any eq 80
access-list match-80-89-acl permit tcp 192.168.2.88 255.255.255.254 any eq 80
access-list match-90-99-acl permit tcp 192.168.2.90 255.255.255.254 any eq 80
access-list match-90-99-acl permit tcp 192.168.2.92 255.255.255.252 any eq 80
access-list match-90-99-acl permit tcp 192.168.2.96 255.255.255.252 any eq 80
class-map httptraffic80-89
match access-list match-80-89-acl
class-map httptraffic90-99
match access-list match-90-99-acl
policy-map type inspect http http_inspection_policy_80-89
class block-80-89-class
reset log
policy-map type inspect http http_inspection_policy_90-99
class block-90-99-class
reset log
policy-map inside-policy
class httptraffic80-89
inspect http http_inspection_policy_80-89
class httptraffic90-99
inspect http http_inspection_policy_90-99
service-policy inside-policy interface inside
Please kindly be advised that this is only for HTTP (not for HTTPS, as HTTPS is encrypted so it won't see the URL, therefore it can't be blocked).
On the inside ACL that is applied to the inside interface, you would also need to add the following:
access-list permit tcp 192.168.2.70 255.255.255.254 any eq 80
access-list permit tcp 192.168.2.72 255.255.255.248 any eq 80
access-list permit tcp 192.168.2.80 255.255.255.240 any eq 80
access-list permit tcp 192.168.2.96 255.255.255.252 any eq 80
access-list deny tcp 192.168.2.100 255.255.255.252 any eq 80
access-list deny tcp 192.168.2.104 255.255.255.248 any eq 80
access-list deny tcp 192.168.2.112 255.255.255.240 any eq 80
access-list deny tcp 192.168.2.128 255.255.255.192 any eq 80
access-list deny tcp 192.168.2.192 255.255.255.248 any eq 80
access-list permit ip any any
