27. A method performed by one or more server devices, the method comprising: determining, by one or more processors of the one or more server devices, that a document in a set of ranked documents requests personal or private information from a user, where documents in the set of ranked documents that are well known are ranked higher than documents that are not well known; identifying, by one or more processors of the one or more server devices, the document as being suspect based on whether the document requests personal or private information from the user; analyzing, by one or more processors of the one or more server devices, data or attributes associated with the suspect document, where analyzing data or attributes associated with the suspect document includes analyzing a ranking of the suspect document relative to rankings of other documents in the set of ranked documents; assigning, by one or more processors of the one or more server devices, a fraud score, based on analyzing the data or attributes, to the suspect document; comparing, by one or more processors of the one or more server devices, the fraud score to a first threshold and to a second different threshold; determining, by one or more processors of the one or more server devices, that the suspect document is trustworthy when the fraud score does not pass the first threshold; determining, by one or more processors of the one or more server devices, that the suspect document is untrustworthy when the fraud score passes the second different threshold; obtaining, by one or more processors of the one or more server devices, a determination of trustworthiness from the user when the fraud score is between the first threshold and the second different threshold; and storing an identifier for a document, the fraud score, and a result representing a trustworthiness of the suspect document in a memory associated with the one or more server devices.
27. A method performed by one or more server devices, the method comprising: determining, by one or more processors of the one or more server devices, that a document in a set of ranked documents requests personal or private information from a user, where documents in the set of ranked documents that are well known are ranked higher than documents that are not well known; identifying, by one or more processors of the one or more server devices, the document as being suspect based on whether the document requests personal or private information from the user; analyzing, by one or more processors of the one or more server devices, data or attributes associated with the suspect document, where analyzing data or attributes associated with the suspect document includes analyzing a ranking of the suspect document relative to rankings of other documents in the set of ranked documents; assigning, by one or more processors of the one or more server devices, a fraud score, based on analyzing the data or attributes, to the suspect document; comparing, by one or more processors of the one or more server devices, the fraud score to a first threshold and to a second different threshold; determining, by one or more processors of the one or more server devices, that the suspect document is trustworthy when the fraud score does not pass the first threshold; determining, by one or more processors of the one or more server devices, that the suspect document is untrustworthy when the fraud score passes the second different threshold; obtaining, by one or more processors of the one or more server devices, a determination of trustworthiness from the user when the fraud score is between the first threshold and the second different threshold; and storing an identifier for a document, the fraud score, and a result representing a trustworthiness of the suspect document in a memory associated with the one or more server devices. 34. The method of claim 27 , where analyzing data or attributes associated with the suspect document comprises: identifying other documents that are similar to the suspect document and comparing the rankings of the identified other documents with the ranking of the suspect document.