Methods and systems for identifying fraudulent websites

1. A computer-implemented method for identifying fraudulent websites, the computer-implemented method comprising:

identifying a fraudulent-website toolkit, the fraudulent-website toolkit being programmed for use in creating a fraudulent website, the fraudulent-website toolkit being programmed to reproduce a plurality of different legitimate websites as fraudulent websites;

determining a characteristic of the fraudulent-web site toolkit, wherein the determined characteristic of the fraudulent-website toolkit is absent from a legitimate website and comprises at least one of a script file, a log file, or a folder;

using the characteristic of the fraudulent-website toolkit to identify a website created using the fraudulent-website toolkit, comprising:

selecting a web search engine;

creating a web search engine query using a web search engine query operator specific to the selected web search engine, the web search engine query including the characteristic of the fraudulent-website toolkit; and

upon performing the web search engine query, receiving a search result indicating one or more matching websites.

2. The computer-implemented method of claim 1 , wherein:

using the characteristic of the fraudulent-website toolkit to identify the website created using the fraudulent-web site toolkit comprises:

identifying the website;

determining that the website comprises the characteristic of the fraudulent-website toolkit.

3. The computer-implemented method of claim 2 , further comprising:

searching for websites that comprise the characteristic of the fraudulent-website toolkit, wherein the website is identified during the searching for websites.

4. The computer-implemented method of claim 1 , further comprising:

determining whether websites identified by the search comprise fraudulent websites,

wherein determining whether websites identified by the search comprise fraudulent websites comprises at least one of:

determining whether websites identified by the search comprise known legitimate websites;

applying at least one anti-phishing algorithm to the websites identified by the search engine.

5. The computer-implemented method of claim 4 , further comprising:

including uniform resource locators for the fraudulent websites in a security blacklist.

6. The computer-implemented method of claim 2 , wherein:

identifying the website comprises determining that a web browser is attempting to access the website.

7. The computer-implemented method of claim 6 , further comprising

determining, before using the characteristic of the fraudulent-website toolkit to identify the website created using the fraudulent-website toolkit, that the website is potentially fraudulent.

8. The computer-implemented method of claim 6 , further comprising at least one of:

blocking access to the website created using the fraudulent-website toolkit;

blacklisting the website created using the fraudulent-website toolkit;

reporting the website created using the fraudulent-website toolkit.

9. The computer-implemented method of claim 1 , wherein:

the fraudulent-website toolkit is a phishing toolkit;

the phishing toolkit is programmed for use in creating a phishing website that looks like a legitimate website.

10. The computer-implemented method of claim 9 , wherein:

the characteristic of the fraudulent-website toolkit further comprises:

an email-sender script.

11. The computer-implemented method of claim 9 , wherein:

determining a characteristic of the fraudulent-web site toolkit comprises identifying a characteristic of the fraudulent-website toolkit that would distinguish a fraudulent website created by the fraudulent-website toolkit from the legitimate website.

12. The computer-implemented method of claim 1 , further comprising:

storing the fraudulent-website toolkit in a database of fraudulent-website toolkits.

13. A computer-implemented method for identifying fraudulent websites, the computer-implemented method comprising:

identifying a phishing toolkit, the phishing toolkit being programmed for use in creating a fraudulent website that looks like a legitimate website, the phishing website toolkit being programmed to reproduce a plurality of different legitimate websites as fraudulent websites;

determining a characteristic of the phishing toolkit, wherein the determined characteristic of the phishing toolkit is absent from a legitimate website and comprises at least one of a script file, a log file, or a folder;

using the characteristic of the phishing toolkit to determine whether a website is fraudulent, comprising:

selecting a web search engine;

creating a web search engine query using a web search engine query operator specific to the selected web search engine, the web search engine query including the characteristic of the fraudulent-website toolkit; and

upon performing the web search engine query, receiving a search result indicating one or more matching websites.

14. The computer-implemented method of claim 13 , further comprising at least one of:

blocking access to the website created using the phishing toolkit;

blacklisting the website created using the phishing toolkit;

reporting the website created using the phishing toolkit.

15. The computer-implemented method of claim 13 , wherein:

the legitimate website comprises at least one of:

a financial institution's website;

an e-commerce website.

16. The computer-implemented method of claim 13 , further comprising:

including the characteristic of the phishing toolkit in a database of phishing toolkit characteristics.

17. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by a computing device, cause the computing device to:

identify a fraudulent-website toolkit, the fraudulent-website toolkit being programmed for use in creating a fraudulent website, the fraudulent-website toolkit being programmed to reproduce a plurality of different legitimate websites as fraudulent websites;

determine a characteristic of the fraudulent-website toolkit, wherein the determined characteristic of the fraudulent-website toolkit is absent from a legitimate website and comprises at least one of a script file, a log file, or a folder;

use the characteristic of the fraudulent-website toolkit to identify a website created using the fraudulent-website toolkit, comprising computer-executable instructions that, when executed by the computing device, cause the computing device to:

select a web search engine;

create a web search engine query using a web search engine query operator specific to the selected web search engine, the web search engine query including the characteristic of the fraudulent-website toolkit; and

upon performing the web search engine query, receive a search result indicating one or more matching websites.

18. The computer-readable medium of claim 17 , wherein the one or more computer-executable instructions cause the computing device to:

determine that a web browser is attempting to access the website.