FYI, I got an email today from 'Pay Pal' advising me there was some strange activity on my Pay Pal credit card. Without really thinking about, I clicked on it to see
WTF was up. The website URL was:
ultra-fiolet.pl/images/www.paypal-com-access1001/ppusa=2394.verify=do.login=1/pr2/pp.htm
And Firefox asked me if I wanted to 'Save my new password', which is odd since it was my normal, old password. Which made me wonder if it was a NEW site, which made me look at the URL. I promptly logged out and logged into my REAL PayPal and changed my password.
Be careful.