I've gotten emails from "support@paypal.com" to 3 addresses (only two of which I actually USE with paypal) with subject "Security Measures," and something looked funny... Not to mention, the link the email asked me to use goes 404.
http://www.paypal.com@207.44.196.35/~redba...d=verification/
What the hell?