You forgot

>a url with a JavaScript exploit

>a url with a img/css browser buffer overrun

>a url with cross site scripting

I see no difference.

EDIT: Actually I do. I is easier to exploit users that can't wait 3 minutes.