Screen Capture of Paypal Phish

Following on from the previous post, I visited the phish site to see how the .CN site looked like. I attach below the screen capture of the page. Click on it and you will see a larger copy to see the URL.

Notice that the URL is clearly a China domain. Normally this will be hidden. The URL was clipped from the html email and pasted on the browser. Cleverly the Phishers also used Javascripts on all the links to prevent further copying of links.