The green unicode checkbox is a nice touch, but they need to make the FROM address a bit more convincing. /cc @PayPalInfoSec (already sent to spoof@paypal.com)