Received an e-mail supposedly from PayPal that had a link in it to view my October Statement. The link was to the domain paypal-communications.com. I looked up that domain on <removed>, and the listing for that domain was suspicious (protected, set up in 2006, strange DNS, etc.). I forwarded the suspicious e-mail to <removed>, but PayPal responded that the e-mail was not fraudulent. I'm still worried... First, I'm a little surprised PayPal would send an e-mail message suggesting I click a link that doesn't take me directly to a login page; the linked page was essentially a copy of the body of the e-mail. Second, would Paypal use a domain called paypal-communication.com? Seems really suspicious. No way it seems to contact PayPal about this other than by forwarding to spoof@paypal.com (which I did after first sending the e-mail to their phishing address).
Anyone have thoughts on this?
