I just got one this morning that pretends to be from Poloniex and attempts to convince the reader to give up their two-factor code:
A request to confirm your mobile number is still open. Please confirm your sms code in your Poloniex Account, please click the > following link: https ://https-poloniex.com/mobile/index.php?r=profile for security reasons, this link will expire in 80 minutes
Sincerely,
The Poloniex Team
This one was pretty obvious with the https-poloniex (and the bottom of the email was in portuguese, for some reason). The link was functional, I broke that just so no one clicks on it from this post accidentally.