I reject posted data from open forms if there are any "http", "https" or "@" in the field. These are all spams. The last valid case was when someone wanted to

I reject posted data from open forms if there are any "http", "https" or "@" in the field. These are all spams. The last valid case was when someone wanted to report a bug on a page from my site and want to include the URL of that page. But this case is so rare now a days. People can't differentiate the URL of a page from the page itself.