I got an email 'Resolution notice to phil.h blah blah' from 'resolution@paypal.com'
  It looked pretty good, and I am tired this evening, so I didnt notice at first, and clicked the 'resolution centre' link. 
 Unfortunately, I didnt notice the login screen wasnt at via https and wasnt actually 'paypal.com' but 'paypal.com-sjd.info' 
 so I started entering my paypal login email address and password, then my security question ... and it was then I thought WTF! and looked at the url. 
 The penny dropped quite quickly then, and I immediately logged into the real paypal and changed my password, email login and security question - and then checked my account 

 I then went to ebay and did the same there. 
 BTW - I write software for a living.
 So, however good you think you are, you can still have an off moment 

 Hopefully I changed everything in time.
 Could you ?