diff --git a/activity.go b/activity.go
index 4cf0285..07c8bd0 100644
--- a/activity.go
+++ b/activity.go
@@ -133,6 +133,9 @@ var flightdeck = gate.NewSerializer()
 var signGets = true
 
 func GetJunkTimeout(userid int64, url string, timeout time.Duration) (junk.Junk, error) {
+	if rejectorigin(userid, url, false) {
+		return nil, fmt.Errorf("rejected origin: %s", url)
+	}
 	client := http.DefaultClient
 	sign := func(req *http.Request) error {
 		var ki *KeyInfo