Paypal have a long history of constructing emails that appear to be phishing attacks but are genuine. They use obscure domains, have login buttons in the email

Paypal have a long history of constructing emails that appear to be phishing attacks but are genuine. They use obscure domains, have login buttons in the email (please don't) and have ignored all requests to tighten things up.