Does "Web Mail" pattern only detect the URL?

No. As for Yahoo web mail, DFL-M510 identifies the behavior ofopening web mail pages after a user has logged in to Yahoo webmail. As for Hotmail, DFL-M510 blocks

URL plus parameters that are necessary for web mail services.For Gmail, DFL-M510 block URLs that are known to connect toGmail.

Rank: 1.5