2. The method of claim 1 further comprising: responsive to locating an entry in the database describing the remote site, comparing the database entry describing the remote site to the remote site itself, to determine whether the remote site conforms to the database description.
2. The method of claim 1 further comprising: responsive to locating an entry in the database describing the remote site, comparing the database entry describing the remote site to the remote site itself, to determine whether the remote site conforms to the database description. 3. The method of claim 2 , further comprising at least one step from a group of steps consisting of: responsive to determining that the remote site conforms to the database description, determining that the remote site is legitimate; and responsive to determining that the remote site does not conform to the database description, determining that the remote site is suspicious.