Integrity checks in URLs for blocking phishers as anti-phishing prevention

[Richard Leroy <rl...@avantages.com>]

Hi list,

I want to know if there is some sort of integrity checks for a situation
where a URL would be different from the "CAPTION" url, example:

<A HREF="http://hacker.com">http://legit-bank.com</a>

On top of my mind, I never saw a situation like this in real life,
except in phish emails.

I have also checked the list and I have found a post related to this
question, here at
http://marc.theaimsgroup.com/?l=spamassassin-users&m=109523766204334&w=2
.  But it looks like nobody produced a rule for this.

I also saw a white paper at
www.stanford.edu/~amo/sa-spoofguard/saspoofguard.pdf and it looks like
the check is already included in their plugin, but I want to know if
there is something more mainstream at the moment in the current version
of SpamAssassin.  If not, would it be possible for someone familiar with
SA to include this check?

I use SA 3.0.4, redhat 8.0 and I'm calling spamassassin through amavisd-new.

Thanks.

--
Richard Leroy
rleroy@avantages.com