I have the same question, and the same suspicions. The email I got says: YOUR MAY ACCOUNT STATEMENT FROM PayPal IS READY LOG IN TO VIEW NOW https://email0.paypal.com/servlet/cc6?iitgHQYRCAQ...very-very-long-gibberish...YVXLX All the URLs in the email start out "https://email0.paypal.com/..." yet it still seems strange. The URL's are incredibly long, for no obvious reason. What's more, the headers show that the email did NOT come from a paypal or eBay mailserver: Received: from om-paypal-na.rsys4.com (om-paypal-na.rsys4.com [12.130.139.53]) by mx.google.com rsys4.com? What's that? It doesn't seem to be a real domain. Looking up the IP... AT&T Services, Inc. ATT (NET-12-0-0-0-1) 12.0.0.0 - 12.255.255.255 Responsys ATTENS-010369-005188 (NET-12-130-139-0-1) 12.130.139.0 - 12.130.139.255 CERFnet ATTENS-SJC1-2 (NET-12-130-128-0-1) 12.130.128.0 - 12.130.191.255 That's not Paypal! What's going on??
... View more