1. A method, comprising: analyzing heuristics which correspond to an originator of a network communication, the heuristics including: data traffic statistics of the originator, a length of operation of the originator, a geographic location associated with a communication of the originator, a reputation of the originator, and a number of clients which communicate with the originator, wherein the analyzing includes determining whether there are discrepancies between geographic locations associated with communications of the originator, examining the reputation of the originator, and determining whether a domain of the originator is on an allow list or a block list; determining a likelihood that the network communication relates to a fraudulent attempt to obtain personally identifiable information based on the analyzed heuristics; and performing one or more actions in conjunction with the network communication based on the determined likelihood.