I got an email 'Resolution notice to phil.h blah blah' from 'resolution@paypal.com'
It looked pretty good, and I am tired this evening, so I didnt notice at first, and clicked the 'resolution centre' link.
Unfortunately, I didnt notice the login screen wasnt at via https and wasnt actually 'paypal.com' but 'paypal.com-sjd.info'
so I started entering my paypal login email address and password, then my security question ... and it was then I thought WTF! and looked at the url.
The penny dropped quite quickly then, and I immediately logged into the real paypal and changed my password, email login and security question - and then checked my account

I then went to ebay and did the same there.
BTW - I write software for a living.
So, however good you think you are, you can still have an off moment

Hopefully I changed everything in time.
Could you ?