Getting started
RansomwarePersonal-data downloadDifferent file formatsExecutable filesHTTP, HTTPS, and cloud downloadsNested file downloadPassword-protected fileFile spoofingEncoded filesEncrypted filesMacro documentWeb AssemblyChunk attacksSmuggling through frontend files
About usContributeURL manipulation
The threat
Attackers hide destinations behind lookalike text, redirects, and short links. If filtering stops at simple URL reputation, the final page may still load.
How the test works
Open a safe lookalike login page using a typo path, homograph character, redirect, or short URL. No real login is used.
Try it yourself
Lookalike path: ‘rn’ mimics ‘m’ and a capital I stands in for a lowercase L, so rnicrosoft-Iogin reads as ‘microsoft-login’ at a glance.
✓
Test pass condition
The gateway blocks the link, warns the user, or prevents the page from loading.
✗
Test fail condition
The lookalike login page opens normally.
Use SWG Audit only in authorized environments with dummy data. By continuing, you agree to our Terms of Use and Privacy Policy.