plan of attack 3 for urls