A guy at work logged into his AOL eMail and received a fake order confirmation from 1-800 Flowers. The link took him to a site where he out in his AOL screen-name and password. (I'll smack him later).