Method and System for Processing Fraud Notifications

A computer-readable medium having computer-executable instructions stored thereon for performing a method comprising:

• receiving an electronic message, the electronic message including a first address of a suspicious network site;
• determining the first address of the suspicious network site by parsing the electronic message;
• determining whether the first address matches one or more previously stored addresses in a database;
• in response to determining that the first address does not match the one or more previously stored addresses in the database, determining if one or more attributes of the suspicious network site matches one or more classification criteria;
• in response to determining that the one or more attributes of the suspicious network site matches the one or more classification criteria, determining whether the one or more classification criteria are indicative of a legitimate site.

An apparatus for processing fraud notifications, comprising:

• a processor;
• and
• memory storing computer readable instructions that, when executed by the processor, cause the apparatus to perform a method comprising:
• receiving an electronic message, the electronic message including a first address of a suspicious network site;
• determining the first address of the suspicious network site by parsing the electronic message;
• determining whether the first address matches one or more previously stored addresses in a database;
• in response to determining that the first address does not match the one or more previously stored addresses in the database, determining if one or more attributes of the suspicious network site matches one or more classification criteria;
• and
• in response to determining that the one or more attributes of the suspicious network site matches the one or more classification criteria, determining whether the one or more classification criteria are indicative of a legitimate site.