Anti-phish 'fake URL' rule idea

I have a great idea for an anti-phishing rule, detecting links that claim to be linking to a different URL than their real target! Will it work?

Take a look at bug 4255 in our Bugzilla – this idea has been tried in many forms, and mostly unsuccessfully. A lot of nonspam senders use this, for some reason.

Here are some examples of real-world false positives:

  <a href="

  <A HREF="">

If you'd like to comment further, please do so on bug 4255.

  • No labels