This one is new to me and I figured I'd pass it along to anyone else who may have gotten a nice authentic looking email from support at paypal dot com. It's an email that claimed that my paypal account had been flagged for "routine security measures" and asked me to click on a (fake) paypal.com link to confirm my information. It looks like the sites real, de-obfuscated address (http://218.38.212.194/pp/processing.htm, which then jumps to http://218.38.212.194/pp/update.htm) is responding, though some browsers (galeon) refuse to load it, so be careful!
If you do get one of these you'll want to contact Paypal by their Contact Us page, and probably throw an email to spoof@paypal.com, including the full headers of the email.
Posted by Arcterex at October 09, 2003 01:57 PM