Thanks for the info on that Greg. I just looked in a different place on my account and found the "MyRewards" points area. They sure don't announce it anywhere on their site. Oh well...wouldn't be the first time that the deployment of a new web-site and communications system had a few best-laid battle plans that didn't survive first contact with the enemy. I'll post the reply from Sprue Brothers when I hear back from them. The IP address is at least in the US, so that's at least not a huge red flag. Could very well be legitimate.