WARNING. I am selling three items on eBay and yesterday I received an eMail supposedly asking if I would accept paypal payment for an item. I did not check the item no. to see if it was one of mine and clicked on the link to answer the question. Up popped a log in box which I filled in. This did not take me to an eBay answer screen so I immediately logged off went to eBay and changed my password details. I forwarded the eMail to eBay and they confirmed that it was a spoof. I have lost nothing because I realised quickly that it was a con. but I thought a word of warning might not go amiss.
Similar thing happened to me a couple of weeks ago. Immediately changed my password.
I had to change my password again 2 days later when eBay themselves spotted an attack on my account. (Had to change my "Secret Question" details too after successfully logging on & changing password again).
Well done eBay on this occasion.
The site responsible was a .cz domain, by the way.