53. A computer-readable memory device containing instructions for controlling at least one processor to perform a method, the computer-readable memory device storing one or more instructions for: identifying a document in a ranked set of documents as being suspect based on whether the document requests personal or private information from a user, where documents in the set of ranked documents that are well known are ranked higher than documents that are not well known; analyzing data or attributes associated with the suspect document, where analyzing data or attributes associated with the suspect document includes analyzing a ranking of the suspect document relative to rankings of other documents in the set of ranked documents; assigning a fraud score, based on the analyzed data or attributes, to the suspect document; comparing the fraud score to a first threshold and to a second different threshold; determining that the suspect document is trustworthy when the fraud score does not pass the first threshold; determining that the suspect document is untrustworthy when the fraud score passes the second different threshold; obtaining a determination of trustworthiness from a user when the fraud score is between the first threshold and the second different threshold; and storing an identifier for the suspect document, the fraud score, and a designation of a trustworthiness of the suspect document in a memory.
55. The computer-readable memory device of claim 53 , where analyzing data or attributes associated with the suspect document further comprises: analyzing a content of the suspect document to determine if the suspect document has characteristics of known fraudulent documents.