Can Your SWG prevent credential theft?

When the victim clicks the phishing link, the uncategorised Zero-Hour domain is allowed by the URL filter.
The attacker harvests the submitted credentials, while the victim is redirected to a legitimate website.

Your SWG must be able to prevent the credential submission to the uncategorised websites