I got an email from PayPal this morning about upcoming changes to their legal agreements. It did not include the changes; instead it told me to go review them at a link beginning with:
https://epl.paypal-communication.com/
...followed by indecipherable tracking codes.
I think it's legit, but I feel like the company is pushing me to click a link that smells like a phishing campaign (in order to review ToS changes they made without my consent). The domain has confused others [1][2], is blocked by uBlock Origin, and it's even been discussed here before [3].
Paypal often reminds me to be wary of phishing scams. Is there a good reason they can't use a subdomain of paypal.com instead?
----
[1] https://security.stackexchange.com/questions/182161/why-would-paypal-send-messages-from-another-domain
[2] https://www.reddit.com/r/paypal/comments/4qlnf0/is_this_a_phishing_attempt/
[3] https://hn.algolia.com/?query=paypal-communication.com&dateRange=custom&dateEnd=1592956800&dateStart=1465948800&prefix=true&type=all
