1. A method comprising: intercepting, using a server computer, a first set of instructions that define a user interface and a plurality of links, wherein each link in the plurality of links is associated with a target page, and the plurality of links includes a first link; determining that the first link references a first target page; determining that the first target page is protected; in response to determining the first target page is protected, generating a first decoy link that corresponds to the first link; wherein the first decoy link includes data that references a first decoy page and not the first target page, wherein the first decoy page includes false information; rendering a second set of instructions define the first decoy link, wherein the second set of instructions are configured to cause a first client computer to hide the first decoy link from the user interface; sending the second set of instructions to the first client computer; wherein the method is performed by one or more computing devices.