Test URL Scanning
Verify your URL scanning configuration by manually scanning test URLs
Overview
bowbridge includes a built-in URL scan tester that allows administrators to verify the URL scanning configuration is working correctly. You can enter any URL manually or use the pre-built test URLs to check detection of malicious, clean, and categorized content.
Accessing the Test Feature
- Go to Settings → URL Scan
- The Test URL Scanner card appears at the top of the page
Scanning a URL
- Enter a URL in the Enter URL field (must begin with
http://orhttps://) - Click Scan URL
- The result appears inline next to the input field
- Expand Show URL Scan Logs below the card to see the full log entry
Using Quick-Insert Test URLs
The tester includes a set of pre-configured test URLs grouped by expected outcome. Click Show Test URLs to expand the panel, then click any button to instantly populate the URL field.
Malicious
These URLs should trigger a Malicious or Blocked result when URL scanning is active:
| Button | URL | Expected Result |
|---|---|---|
| Phishing Example | https://login-verify.phish-example.com | Malicious |
| EICAR Test | https://eicar.org/test-malware | Malicious |
Clean
These URLs should return a Clean or Allowed result:
| Button | URL | Expected Result |
|---|---|---|
https://www.google.com | Clean | |
| GitHub | https://github.com | Clean |
Category (NSFW / Gambling)
These URLs are not inherently malicious but may be blocked depending on your Category Blocking configuration:
| Button | URL | Expected Result |
|---|---|---|
| Gambling Site | https://www.casino-example.com | Blocked (if gambling category is blocked) |
| Adult Content | https://www.adult-example.com | Blocked (if adult category is blocked) |
Category-based results depend on your URL Scan Settings. If content categories are not configured for blocking, these URLs may return Allowed.
See URL Scan Settings for details.
Understanding Results
| Result | Meaning |
|---|---|
| Clean | URL passed the reputation scan with no threats detected |
| Suspicious | URL shows low-confidence threat signals |
| Malicious | URL is confirmed malicious by the scan engine |
What to Verify
After scanning a test URL, confirm the following:
| What to check | Where to look | Expected |
|---|---|---|
| Scan log created | Reporting → URL Scan Logs | New entry for the scanned URL |
| Correct verdict | Result column in the log | Matches expected result above |
| Notification received | Bell icon / email | Alert delivered (if notifications configured) |