On PayPal, with my URL bar looking like this:
I saw a banner ad for “Can You Spot Phishing?”. Intrigued, I clicked it and, after a short interstitial screen, ended up with my URL bar looking like this:
<facepalm> Which country is SG? Why doesn’t that match the “.co.uk” TLD? And is PayPal, Inc. the same company as PayPal Pte Ltd? And surely anyone could register a “paypal-marketing” domain?
Can I spot phishing? Well, my current well-tuned phishing detector is already flashing orange…