[Esd-l] Mangle of embedded URLs

[John D. Hardin]

On Fri, 7 Jan 2005, Simon Matthews wrote:

> I have SA installed. I was just thinking of a way to recognize
> phishing malicious URLs -- use the same mechanism (although
> perhaps not the same databases).

I think the SURBL guys are working on phishing lists. Are you using
SURBL rules?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org    FALaholic #11174    pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
What nuts do with guns is terrible, certainly. But what evil or crazy
people do with *anything* is not a valid argument for banning that item.
                                  -- John C. Randolph <jcr at idiom.com>
-----------------------------------------------------------------------