I received confirmation from PayPal that it was a spoof message and it is under investigation. When you click the link, it goes to an IP address (for example, http://111.111.1.11 instead of www.paypal.com). I hesitate to post the actual IP address because it is under now under investigation.