Latest phishing technique

[ProxRocks]

My un-prefix filter blocks those (with a slight problem with the link title)...

Code:

Name = "Un-Prefix Multi URL Links [Key=^Shift] {unknown origin} (modified) [add]"
Active = TRUE
Multi = TRUE
URL = "($TYPE(htm)|$TYPE(js))(^$TST(keyword=*.redpref.*))(^$KEYCHK(^S))(^$LST(Secure))"
Bounds = "<a\s*</a>"
Limit = 512
Match = "<a\s"
"\2href="
"("
"("|)\0(^javascript:)"
""
"&$AV("
"("
"????????*[^a-z0-9]"
""
"("
"((http|ftp)(s|)://)\4"
"|URL=(^(http|ftp)(s|)://)$SET(4=http://)"
"|www.$SET(4=http://www.)"
")"
")+{1,*}([^\&]+)\1*([\&]+)\7*([^\&]+[^a-z0-9]+[^\&]+)\8*"
""
")"
""
")\6"
"\3>\5</a>"
Replace = "<a title='Link Prefix Removed: \6' class="prefixed" \2href=\0\4\1\7\8\0 \3>\5</a>"