1. A method for facilitating the identification of a phishing website, comprising the steps of: a. electronically receiving over a network a url suspected of being a phishing website at a computer system linked to the network; b. using said computer system to electronically retrieve over the network retrieving the index page associated with said url; c. transmitting the index page to a processor portion of the computer system and using the processor portion to determine whether the retrieved index page has been processed before; wherein if the index page has not been processed before, initiating the following steps: i. using the computer system to retrieve over the network all remaining elements referenced in said index page at said suspect url; ii. using the processor portion to calculate a hash value for each of said retrieved elements to create a hash value set associated with said url; iii. using the processor portion to compare said hash value set to prior saved hash value sets and calculating a similarity value for each said comparison; iv. using the processor portion to determine if each said similarity value exceeds a prior established threshold; and, v. using the computer system to output a no match indication if none of said similarity values exceeds said threshold, d. if a no match indication is returned, using the computer system to output an electronic communication to a human indicting further evaluation of said url is necessary.
1. A method for facilitating the identification of a phishing website, comprising the steps of: a. electronically receiving over a network a url suspected of being a phishing website at a computer system linked to the network; b. using said computer system to electronically retrieve over the network retrieving the index page associated with said url; c. transmitting the index page to a processor portion of the computer system and using the processor portion to determine whether the retrieved index page has been processed before; wherein if the index page has not been processed before, initiating the following steps: i. using the computer system to retrieve over the network all remaining elements referenced in said index page at said suspect url; ii. using the processor portion to calculate a hash value for each of said retrieved elements to create a hash value set associated with said url; iii. using the processor portion to compare said hash value set to prior saved hash value sets and calculating a similarity value for each said comparison; iv. using the processor portion to determine if each said similarity value exceeds a prior established threshold; and, v. using the computer system to output a no match indication if none of said similarity values exceeds said threshold, d. if a no match indication is returned, using the computer system to output an electronic communication to a human indicting further evaluation of said url is necessary. 9. The method as recited in claim 1 , wherein said step of using the processor portion to compare said hash value set to prior saved hash value sets and calculating a similarity value for each said comparison comprises using comparison models selected from the group consisting of the Simpson method, the Bruan-Blanquet method, the Kulczynski 1 method, and the Kulczynski 2 method.