MFA OTP Phishing Page Detected

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects potential MFA OTP phishing pages by inspecting HTTP URIs for the presence of both 'verify' and 'otp' keywords, case-insensitively. This combination in a URI is indicative of a page designed to trick users into submitting their One-Time Passwords (OTPs) for multi-factor authentication.