How does sophos web filtering in Android work? Does it only filter based on blacklisted urls in the database? Or does it perform real time scans of the websites underlying code to detect malicious websites?