This one: http://cgil1-paypal.com/.us/index.htm

Clever. It does not use JavaScript to draw an image and spoof the address bar or anything like that; it simply registered the domain cgil1-paypal.com. With this sort of approach, something like http://www-payal.com/ also seems possible. In the end, trying to authenticate something by appearance is simply impossible.

Related posts