No offense, but if you got a phishing email from a paypal smtp server than that is more important than the PSA of your last paragraphs. Report it to paypal asap.