didsomeoneclone.me is a free, cloud-based website clone monitoring and anti-phishing service built on Microsoft Azure. It detects classical phishing, Adversary-in-the-Middle (AiTM) attacks, and Browser-in-the-Browser (BITB) attacks by utilizing personal links, custom CSS, or tracking pixels added to protected websites, such as Microsoft 365 login pages.
The service analyzes incoming requests to identify if a protected page is being loaded from an unauthorized or cloned domain. When an attack is detected, the backend can trigger notifications, exclude known false positive IP addresses like Microsoft Sandboxes, and serve warning images directly to victims interacting with the malicious page.
