SARE_FRAUD has rules to catch text patterns in messages. It does not look for phishing URI domains and IP addresses. Therefore PH and SARE_FRAUD are not equivalent, and you may want to keep using the SARE rule, even if you are using PH in multi.surbl.org.
More importantly, many of the patterns SARE_FRAUD looks for are aimed at 419 scams (also known as the Nigerian scam, though many of them are based in other countries now). These messages rarely contain URLs, and when they do they are usually links to actual news stories chosen to make the scammer's story more compelling.
-- Kelson Vibber SpeedGate Communications <www.speed.net>
