Geoff the Duck--Jeri is correct--you've simply identified two parts of the same site, the general access and the secure access.

Next time you get one of the emails asking you to send personal data, if you're curious, open the header and poke around. You'll find that there is a different reply address, even if it looks like it is going to paypal. It has been directed to show one address but interact with another.

SRS