check for banned domains, paths, or both