[addin] SpoofStick (anti-spoof browser toolbar for IE and Firefox)
There were some good comments on how to detect, filter, alert, or educate around the problem of URL spoofing, in which an e-mail or site shows a link that pretends to take you to one domain but takes you to another:
<a href=www.evilhackerz.com/steelPasswurdz.php>www.ebay.com/update/passwords</a>
I commented that someone could make a browser addin that detected URL text that looked like an HREF but didn't match domains and show a warning.
I just saw a toolbar for both IE and Firefox that doesn't quite do that, but takes a step. It shows you what domain you're on, so you'd at least know (after you'd followed the link, but before you'd submitted any information) that you'd been had:
I don't plan to use this - I get so many spoofing / phishing e-mails that I'm used to the precautions. I think I might set it up on my wife's computer and recommend it to family. At least it answers the question of "How is anyone supposed to know that" and takes a step to doing something about the problem. Hopefully, Phish Detection will be as standard as Pop-Up Blockers some day.
Download Spoofstick here:
http://www.corestreet.com/spoofstick/index.html