1. A method for operating a scanning facility executing on processing circuitry, the method comprising: receiving a request for content from a client at the scanning facility, the request including an outbound network request from the client with a Uniform Resource Identifier (URI) including a domain for the URI; saving contextual information from the request at the scanning facility, wherein the contextual information includes a character string associated with an improperly typed URI of a registered domain name for an organization; examining the request for compliance with a management policy at the scanning facility; retrieving a content item responsive to the request at the scanning facility; and analyzing, with the scanning facility, the contextual information from the request and the content item responsive to the request to detect whether the content item includes restricted content based on the management policy.