Duh, Sometimes I type too fast. What I meant was that Safe Harbor as we all knew it is no more. The "Ebay Safeharbor" was spooked, meaning they use that return address to make it appear that it came from Ebay. The people/person who sent you the fake email probably put a URL in it to get you to try your password there as well as "update" your information, which could include your C/C if your a seller. Hence, they get your info and use your card until they are caught. Neat trick and sometimes it's easy to fall for.

Mike