83. A method performed by one or more server devices, the method comprising: receiving a query, at one or more processors of the one or more server devices, inquiring about a document in a set of ranked documents, where documents in the set of ranked documents that are well known are ranked higher than documents that are not well known; determining, by one or more processors of the one or more server devices, a fraud score for the document based on one or more factors, where the one or more factors include a ranking of the document relative to other documents in the set of ranked documents; designating, by one or more processors of the one or more server devices, the document as trustworthy when the fraud score does not pass a first threshold; designating, by one or more processors of the one or more server devices, the document as untrustworthy when the fraud score passes a second different threshold; obtaining, by one or more processors of the one or more server devices, a designation of trustworthiness from a user when the fraud score is between the first threshold and the second different threshold; and storing, in a memory associated with the one or more server devices, an indication of the trustworthiness of the document, determined based on designating the document as trustworthy, designating the document as untrustworthy, or obtaining a designation of trustworthiness, with the fraud score and an identifier for the document.
83. A method performed by one or more server devices, the method comprising: receiving a query, at one or more processors of the one or more server devices, inquiring about a document in a set of ranked documents, where documents in the set of ranked documents that are well known are ranked higher than documents that are not well known; determining, by one or more processors of the one or more server devices, a fraud score for the document based on one or more factors, where the one or more factors include a ranking of the document relative to other documents in the set of ranked documents; designating, by one or more processors of the one or more server devices, the document as trustworthy when the fraud score does not pass a first threshold; designating, by one or more processors of the one or more server devices, the document as untrustworthy when the fraud score passes a second different threshold; obtaining, by one or more processors of the one or more server devices, a designation of trustworthiness from a user when the fraud score is between the first threshold and the second different threshold; and storing, in a memory associated with the one or more server devices, an indication of the trustworthiness of the document, determined based on designating the document as trustworthy, designating the document as untrustworthy, or obtaining a designation of trustworthiness, with the fraud score and an identifier for the document. 84. The method of claim 83 , where the query originates from an e-mail application.