a method and system for discovering inappropriate and / or illegitimate use of web page content , comprising : monitoring access to a first web page by a user ; comparing information from the first web page to information from a second known legitimate web page ; and determining whether the first web page is legitimate based on the compared information .