Just to emphasize the point The REAL paypal website address starts http://.
The website we assume must be a FAKE SCAM paypal website address starts https://. The rest of the web address is identical, and the FAKE(?) site looks almost identical to the real site - I presume that they have copied the web HTML source, plus any graphics from the original, but then altered the bits they hope you will insert your passwords and bank details into.
Try opening both in separate web windows and see how similar they look.
REAL (?) SITE http://www.paypal.com/
FAKE (?) SITE https://www.paypal.com/

Does anyone out there know anything about what is going on?
Quack!
Geoff the Duck.