Automatic detection of proxy-based phishing sites

A computer-implemented method, comprising:

• accessing, by a computer system comprising a processor, a computer-executable web resource;
• and
• embedding, by the computer system, an authorization verification logic within the computer-executable web resource, such that the authorization verification logic is obfuscated within the computer-executable web resource, and wherein, upon execution of the computer-executable web resource, the authorization verification logic is configured to perform operations comprising:
• identifying a computing domain via which the computer-executable web resource is being executed;
• comparing the identified computing domain with one or more authorized computing domains;
• determining that the identified computing domain is an unauthorized proxy site if the identified computing domain does not match at least one of the one or more authorized computing domains;
• and
• initiating a remedial action based on determining that the identified computing domain is an unauthorized proxy site.

A non-transitory computer-readable medium having program instructions stored thereon that are executable by a computer system to cause the computer system to perform operations comprising:

• identifying, by the computer system, a computing domain via which one or more scripts of a web page are being executed;
• comparing, by the computer system, the identified computing domain with one or more authorized computing domains;
• determining, by the computer system, that the identified computing domain is an unauthorized proxy site if the identified computing domain does not match at least one of the one or more authorized computing domains;
• and
• initiating, by the computer system, a remedial action based on determining that the identified computing domain is an unauthorized proxy site.