With .url (will bypass)
Without .url (will be blocked)