I received an email from MyEtherWallet to claim some tokens of an airdrop I joined. Hovering my mouse over the link,  I discovered it's a link to another cgi scripted site.

Interestingly you don't create MEW wallets using email addresses.

Guys be careful and be vigilant.