Patent ID: 8341737

Claim:
A computer-implemented method for detecting fraudulent web sites comprising: downloading a web page from a web server hosting a web site; loading, by a client, a callback component embedded on the web page downloaded from the web server, the callback component comprising computer-executable instructions executed by a processor of the client when an application loads the web page, the computer-executable instructions of the callback component identifying a known legitimate host location of a legitimate web site hosted by a trusted web server; determining a current host location of the web site hosted by the web server from which the web page was downloaded by executing the instructions of the callback component embedded on the web page; determining by executing the instructions of the callback component, if the current web location of the web site hosted by the web server is different than the known legitimate host location of the legitimate web site hosted by the trusted web server identified by the callback component; responsive to determining that the current host location of the web site hosted by the web server is different than the known legitimate host location of the legitimate web site hosted by the trusted web server, reporting to a central server that the web site is fraudulent by executing the instructions of the callback component.