11. The method as recited in claim 10 , further including the step of saving said suspect url in the database and using the one or more processor to assign a category value to said url in response to said method.
11. The method as recited in claim 10 , further including the step of saving said suspect url in the database and using the one or more processor to assign a category value to said url in response to said method. 12. The method as recited in claim 11 , further including prior to said url receiving step the step of receiving an e-mail message over the network having one or more suspected phishing site urls and using the one or more processor to parse said e-mail message to produce said set of suspect urls.