Doing a Whois on the domain returns odd stuff:
http://www.dnsstuff.com/tools/whois....d-j4udria6.com

EDIT: Found it, probably false information:

Registrant:
Sorial, Andrew

5040 NW 24th Circle
Boca Raton, FL 33431-4330
US

http://www.google.com/maps?f=q&hl=en...06781&t=h&om=1

BTW, did you at least report it to PayPal yet?

spoof@paypal.com

Yeah, it's not perfect. I sent the suggestion to PayPal and they actually sent me a personally-written reply (not canned or an autoresponder) , so at least they hire thinking staff!

Any email that asks you to confirm account information and threatens loss of privileges unless done within a certain time period should be considered a phishing scam. No reputable business will do that.

Not so sure, how would an organization deal with it if their customer database, including login information, gets stolen ?
Sit tight ?
Hopefully not.

A reputable business whose customer database got stolen would notify their customers about the security breach and ask them to take some action. However, phishing emails always contain the additional threat that if action is not taken within a certain timeframe (usually a few days), the account will be limited or terminated in some way. No reputable business would send a threat to their customers.

BTW, they (PayPal, feds, whoever) closed down the site. not sure exactly when, though.