function FindProxyForURL(url, host) {

    // -------------------------------------------------------
    // Bypass rules - traffic sent DIRECT (not through Zscaler)
    // -------------------------------------------------------

    // Bypass whatismyipaddress.com and all subdomains
    if (dnsDomainIs(host, ".whatismyipaddress.com"))
        return "DIRECT";

    // Also catch the bare domain without a subdomain
    if (host == "whatismyipaddress.com")
        return "DIRECT";
    // -------------------------------------------------------
    // Default: send all other traffic through Zscaler
    // -------------------------------------------------------
    return "PROXY gateway.zscaler.net:80; PROXY gateway.zscaler.net:443; DIRECT";
}