Detecting phising scams on wire

[vulnerabilty () gmail com]

I am working on IPS signatures to detect phising scams on wire.
the points in my mind are 
IPS should have capabilty to validate the IP addresses using reverselookup or by maintaining a list of blacklisted IPs.
to check SSL validation for commercial sites on wire to prevents url spoofing 
i would appreciate your comments and suggestion 

thanks in advance
 


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------