Patent ID: 8291065

Claim:
One or more computer-readable storage media embodying computer readable instructions which, when executed, implement a method, comprising: receiving content from a network-based resource, the content including multiple selectable links; rendering a user interface of a Web browsing application to display the content received from the network-based resource; determining that the content received from the network-based resource contains a phishing attack, including: associating a plurality of the multiple selectable links with a first Web site, associating another link of the multiple selectable links with an input form hosted at a second Web site, the first Web site being a legitimate Web site and being different from the second Web site, and determining, based on the plurality of the multiple selectable links associated with the first Web site and the other link associated with the second Web site, that the content contains the phishing attack; and warning a user that the content contains the phishing attack.