Patent ID: 7630987

Claim:
A computer-implemented method of facilitating detection of phishing-related websites from among a plurality of referring websites, the method comprising: accessing a referral list of websites that link to a legitimate website; calculating statistical outliers within the referral list of websites based on historical patterns to produce a dataset of suspect websites from the referral list of websites; creating an array of relevant points wherein each relevant point corresponds to a defined HTML tag to construct a referring site fingerprint for each of the suspect websites in the dataset based on content of a suspect website; comparing each referring site fingerprint to a fingerprint for the legitimate website by determining the number of matches between the array of relevant points and a second array forming the fingerprint for the legitimate website to calculate a relevance score using a percentage match between the referring site fingerprint and the fingerprint for the legitimate website, the relevance score indicating a likelihood that the suspect website is a phishing-related website; and presenting the relevance score for each of the suspect websites.