The real website has a secure website because it has the https in front of the link while the fake one doesn’t. The fake one also has a dash in the middle of xyzcompany.

The fake website has PayPal spelled wrong, which is a telltale sign that it is a fraudulent website.

The fake website doesn’t have the same website design as the real one, and is also not a secure website as it doesn’t have https in front of the link.