URL Threat Analysis • Engine 02
URL Threat & Phishing Check
Inspect redirect behavior, domain deception, phishing indicators, and virus payload links using live response telemetry.
Brand Impersonation
Identifies deceptive lookalike domains targeting PayPal, Apple, Google, Microsoft, and banks.
Redirection Journey
Tracks every HTTP 301/302 hop, uncovering final landing destinations across cross-domain redirects.
Deception Heuristics
Detects raw numeric IP hosts, internationalized punycode spoofing (xn--), and authority @ tricks.
Malware Payload Links
Inspects query targets for direct executable file deliveries (.exe, .msi, .bat, .apk).
Credential Form Theft
Audits password input presence on unencrypted or unauthenticated third-party domains.
Live Telemetry
Captures actual response HTTP status, latency, server headers, and certificate parameters.