Website Clone Detection

The ideal phishing website attack technique is to copy the customer website HTML to imitate the user experience of a real website.

The following steps illustrate how the Phishing Watch works when a website is cloned:

1. The Phishing Watch JavaScript snippet is created and embedded in the website.

2. The snippet launches each time the webpage is loaded or refreshed.

3. When the snippet identifies a nonformal suspicious website (by inspecting the URL of the webpage), it reports the suspicious URL back to Digital Risk Protection (Threat Command) servers in a stealthy, low footprint manner.

4. The snippet’s allowlist excludes cases where it may be operating on the organization’s official website.