Via Boing Boing comes the first scam (that I know of) using the recently discovered IE URL spoof vulnerability.