Unusually competent phishing attempt (PayPal)

Pretty fascinating, @Ann_Hedonia . Good sleuthing !

More on the process (although it doesn’t explicitly say that your invoice email will come from a PayPal [dot] com domain):

There does seem to be more info about this one the Web (maybe not ‘more info,’ but some ‘reporting’ that comes to similar conclusions):