I think it had something to do with which shield blocks it - if it was network shield (Mal) or webshield (Mal2). Since the merge of the two shields, I think you should only be seeing URL:Mal.
So anyway, for you or me, it should be the same, it is only an implementation detail.