The bill explicitly allows the President to designate a "website" as a threat. How that would be applied exactly is a different question, which is why many argue that this is a Pandora's box not worth opening.
> bill explicitly allows the President to designate a "website" as a threat
No, it has to be controlled by a foreign adversary country [1].
The broadest power is in 3(a)(ii) on page 10, which lets the President designate an app or website as a foreign adversary controlled application if it is a significant national security threat following public notice and reporting requirements. But even then, it’s a divestiture order subject to judicial review, not the power to ban.