I find it really disturbing how many people are busy attacking the author because he should have known better, or they think he's going to use the domain in a way that doesn't add value. The domain and use of the domain in question is irrelevant.

The takeaway is that PayPal has a ludicrous policy of accepting easily faked screenshots as indisputable truth that a domain has been transferred, as the OP demonstrates here: http://tooltrainer.com/blog/watch-me-hack-and-own-paypal-com...

Reminds me of the the people saying it was okay that Ashley Madison got hacked, because we don't like cheaters and therefore they deserve whatever they get. And while we're busy feeling morally superior, the real bad guys continue to scam and harm more people.