removed url from hostslist in vulns in report. Can be used in Proof instead