Well I ain't no expert but...
Since the first Phish addy is usually in xxx.xxx.etc. URL notation, prior to any authentic one, and here -- it's

www.houseofhope.ro

I'd call this an Obvious Phish - even if I weren't already familiar with eBay layout habits.

I mean - no viable 'address' should precede ebay.com - right?
Or am I missing something subtle?

('Course too - re. any communication "from eBay": one goes to My eBay to verify legitimacy.) There are few email links I'd ever clicky clicky sans-Thinking (Salon is one.)

I get about 2-4 a week; most are immediately obv. via mouse-over. Sometimes (if it's an org which I use - I'll send a copy along.. to fraud@ incl. several like this: to eBay. Not that I imagine that they spend more than $666/year "Hunting Fraudsters" - for all their Billions.

It takes a Village and a p-p-p-Powerbook to really OUT-scam one of these mothers.