FYI...

- http://sunbeltblog.blogspot.com/2008/03/google-adwords-phishing.html
March 25, 2008 - "...the email reads like this:
Dear Google AdWords Customer!
In order to update your billing information, please sign in to your AdWords account at... and submit your billing information. Your account will be reactivated as soon as you have entered your payment details. Your ads will show immediately if you decide to pay for clicks via credit or debit card. If you decide to pay by direct debit, we may need to receive your signed debit authorization before your ads start running, depending on your location. If youchoose bank transfer, your ads will show as soon as we receive your first payment. (Payment options vary by location.)
Thank you for choosing AdWords. We look forward to providing you with
the most effective advertising available.

Sincerely,
The Google AdWords Team

...CSIS says these are all fast-flux on Chinese domains."

(Screenshot available at the URL above.)

FYI...

"Dear Google AdWords Customer"
- http://www.f-secure.com/weblog/archives/00001444.html
May 27, 2008 - "Sometimes it can be quite hard to spot a phishing site on the first glance [ see URL used in screenshot at the F-secure site above ]. Sure, it looks quite real. But always doublecheck the address."