What is the difference between phishing and spear phishing?

Phishing is broad and untargeted; spear phishing targets a specific person or company with personalised lures based on prior reconnaissance — often using LinkedIn, breach data, or supplier-chain knowledge to build credibility.

Why do phishing pages look so convincing?

Attackers use 'phishing kits' — ready-made packages that mirror the real login page pixel-for-pixel, including JavaScript-based validation, captcha relays, and even live MFA proxying via tools like Evilginx or Modlishka.

How do FraudRadar's detections work?

We combine new-domain registration feeds, certificate-transparency logs, brand-keyword crawlers, passive DNS, and visual-similarity ML to find candidate pages within minutes of going live.

Can MFA stop phishing?

App-based and SMS MFA can be intercepted by adversary-in-the-middle phishing kits. Hardware-backed FIDO2/WebAuthn keys are currently the only widely-deployed factor that resists real-time phishing.

How long does the average phishing site stay online?

Industry medians sit between 24 and 72 hours. Brands with continuous monitoring and pre-authorised takedown routes routinely cut that to under 4 hours.

Fraud library

Know the attack patterns.

Short, practical explainers for the fraud techniques our analysts disrupt every day.

Request Access Contact Sales

Know the attack patterns.

Phishing

Smishing

Typosquatting

Brand impersonation

Investment scams