Detection of phishing attempts

Abstract

A method for alerting a service provider and/or a user of a web browser of a phishing attempt comprises providing on a page that it is desired to protect against phishing, a Javascript that when caused by a phishing page to run not in the context of the original page generates an indication that a phishing attempt may exist.

What is claimed is: 
     
         1 . A method for blocking illegitimate access to a computer-hosted website, the method comprising:
 storing a web page on a computer-hosted website, wherein the web page is configured to cause a web browser to
 a) retrieve computer-executable instructions from the website when the web page is rendered by the web browser, and 
 b) execute the computer-executable instructions to
 b1) determine a source address of the web page, 
 b2) determine whether the source address is associated with the website, and 
 b3) report to a computer server associated with the computer-hosted website when the source address is not associated with the website; and 
 
   at least partly blocking access to the website responsive to receiving the report at the computer server.   
     
     
         2 . The method according to  claim 1  and further comprising:
 configuring the computer-executable instructions to recover user credentials input into the web page and send the user credentials to a computer server associated with the website; and 
 at least partly blocking access to the website in a manner that is associated with the user credentials. 
 
     
     
         3 . A system for blocking illegitimate access to a computer-hosted website, the system comprising:
 a web page stored on a non-transitory, computer-readable storage medium of a computer-hosted website, wherein the web page is configured to cause a web browser to
 a) retrieve computer-executable instructions from the website when the web page is rendered by the web browser, and 
 b) execute the computer-executable instructions to
 b1) determine a source address of the web page, 
 b2) determine whether the source address is associated with the website, and 
 b3) report to a computer server associated with the computer-hosted website when the source address is not associated with the website; and 
 
   a computer server associated with the computer-hosted website, wherein the computer server is configured to at least partly block access to the website responsive to receiving the report.   
     
     
         4 . The system according to  claim 1  wherein the computer-executable instructions are configured to recover user credentials input into the web page and send the user credentials to a computer server associated with the website, and wherein the computer server is configured to at least partly block access to the website in a manner that is associated with the user credentials.