Patent ID: 7634810
Filing Date: 2009-12-15
Classification: H04L

Abstract:
1. One or more computer-readable storage media embodying computer readable instructions which, when executed, implement a method comprising: rendering a messaging user interface to facilitate communication via a messaging application; receiving a communication from a domain that is located in a country; and detecting a phishing attack in the communication by at least one of determining that the domain from which the communication is received is similar to a known phishing domain and detecting suspicious network properties of the domain from which the communication is received; wherein detecting suspicious network properties includes the following: detecting that the communication is received from the domain which is a newly established domain on the internet; detecting that the communication is received from the domain which has a low static rank; detecting that the content of the domain which includes multiple user-selectable links to a first network-based resource and the first network-based resource is configured to submit form data to a second network-based resource; detecting that an IP (Internet protocol) address corresponding to the domain does not correlate with the country where the domain is located; and detecting a phishing attack in the communication at least in part by examining a user-selectable link within the communication, wherein the communication contains a user-selectable link to a web site with a minimal amount of content or a user-selectable link to a little-trafficked site.