- Cloned login page detected
App banner
Blocked URL visited
Browser extension blocked or enabled
Clipboard blocking
Custom detection
Domain category blocking triggered
File download blocking
File upload blocking
Malicious browser extension detected
Malicious copy and paste detected
MFA enforcement event
Password logging prevention
Phishing tool detected
Protected password entered
Stolen credentials detected
Strong password enforcement event
SSO password used
Cloned login page detecte...
Security
X-Signature
A cloned login page detected event occurred.
The unique identifier for the event. This can be used as an idempotency key.
Example:"c478966c-f927-411c-b919-179832d3d50c"
The unique identifier of the tenant the event belongs to.
Example:"4f9d2e7a-1b3c-4d5e-8f6a-7c8b9d0e1f2a"
When the event occurred, formatted as a UNIX timestamp (in seconds).
Example:1698604061
The description of the event. Note: this is subject to change and should not be used to match on this object.
Example:"john@company.com visited https://evil.com/okta.php which is a clone of a Okta login page"
The friendly name of this object. Note: this is subject to change and should not be used to match on this object.
Example:"Cloned login page detected"
POST
curl -i -X POST \
https://api.pushsecurity.com/cloned-login-page-detected \
-H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
-H 'Content-Type: application/json' \
-H 'X-Signature: X-Signature: t=1492774577,v1=5257a869...' \
-d '{}'