Holy cow, Google, this is pretty good for automatic protection. It looks like Google sees that the guy is hosting the Paypal favicon (or something very close to it)... why would any legit site do that? Even the redesign doesn't need to show the Paypal favicon. So Google errs on the side of caution.