12. A method of investigating a suspicious uniform resource locator to determine whether a server referenced by the uniform resource locator may be involved in fraudulent activity, the method comprising: accessing, by a computer, a data source to obtain data about a suspicious activity; downloading, using the computer, the data from the data source; ascertaining, by using the computer to parse the obtained data, a uniform resource locator involved with the suspicious activity, wherein the uniform resource locator is associated with an anchor, the anchor comprising a displayed address; ascertaining, by the computer, the displayed address indicated by the anchor associated with the uniform resource locator; ascertaining, by the computer, an actual address associated with a server referenced by the uniform resource locator; comparing, by the computer, the displayed address with the actual address associated with the server referenced by the uniform resource locator, wherein the displayed address comprises at least one of a first domain and a first internet protocol (IP) address, and wherein the actual address associated with the server referenced by the uniform resource locator comprises at least one of a second domain and a second IP address, and further wherein comparing the displayed address with the actual address associated with the server referenced by the uniform resource locator comprises determining whether the displayed address is different than the actual address associated with the server referenced by the uniform resource locator by performing at least one of a comparison between the first domain and the second domain, and between the first IP address and the second IP address; obtaining, by the computer, domain information about the displayed address; obtaining, by the computer, WHOIS ownership information about the displayed address; comparing, by the computer, the obtained domain information about the displayed address with the WHOIS ownership information about the displayed address; and determining, by the computer and based on the comparison of the obtained domain information about the displayed address with the WHOIS ownership information about the displayed address and the comparison of the displayed address with the actual address associated with the server referenced by the uniform resource locator, whether the uniform resource locator is fraudulent.
12. A method of investigating a suspicious uniform resource locator to determine whether a server referenced by the uniform resource locator may be involved in fraudulent activity, the method comprising: accessing, by a computer, a data source to obtain data about a suspicious activity; downloading, using the computer, the data from the data source; ascertaining, by using the computer to parse the obtained data, a uniform resource locator involved with the suspicious activity, wherein the uniform resource locator is associated with an anchor, the anchor comprising a displayed address; ascertaining, by the computer, the displayed address indicated by the anchor associated with the uniform resource locator; ascertaining, by the computer, an actual address associated with a server referenced by the uniform resource locator; comparing, by the computer, the displayed address with the actual address associated with the server referenced by the uniform resource locator, wherein the displayed address comprises at least one of a first domain and a first internet protocol (IP) address, and wherein the actual address associated with the server referenced by the uniform resource locator comprises at least one of a second domain and a second IP address, and further wherein comparing the displayed address with the actual address associated with the server referenced by the uniform resource locator comprises determining whether the displayed address is different than the actual address associated with the server referenced by the uniform resource locator by performing at least one of a comparison between the first domain and the second domain, and between the first IP address and the second IP address; obtaining, by the computer, domain information about the displayed address; obtaining, by the computer, WHOIS ownership information about the displayed address; comparing, by the computer, the obtained domain information about the displayed address with the WHOIS ownership information about the displayed address; and determining, by the computer and based on the comparison of the obtained domain information about the displayed address with the WHOIS ownership information about the displayed address and the comparison of the displayed address with the actual address associated with the server referenced by the uniform resource locator, whether the uniform resource locator is fraudulent. 19. A method as recited in claim 12 , wherein the data source comprises a newsgroup.