URL Threat Analysis • Engine 02

URL Threat & Phishing Check

Inspect redirect behavior, domain deception, phishing indicators, and virus payload links using live response telemetry.

Brand Impersonation

Identifies deceptive lookalike domains targeting PayPal, Apple, Google, Microsoft, and banks.

Redirection Journey

Tracks every HTTP 301/302 hop, uncovering final landing destinations across cross-domain redirects.

Deception Heuristics

Detects raw numeric IP hosts, internationalized punycode spoofing (xn--), and authority @ tricks.

Malware Payload Links

Inspects query targets for direct executable file deliveries (.exe, .msi, .bat, .apk).

Credential Form Theft

Audits password input presence on unencrypted or unauthenticated third-party domains.

Live Telemetry

Captures actual response HTTP status, latency, server headers, and certificate parameters.