Yes. Just the URL has stuff after the paypal.com. There seem to be quite a few in Hong Kong these days. The link is just a page looking like paypal saying you've received payment from someone and you need to log in to accept it or something like that.

That is the reason some banks say type in their URL or only use a bookmark, like sein mention.

Phishing sites are rarely set up to take advantage of any browser vulnerabilities in my experience. They are just relying on human vulnerabilities.