This scam, of course, has weaknesses - the most notable is the absence of the lock icon - which is pretty suspicious, having in mind the 'https' in the begining of the URL. Also, if the properties screen of the page is invoked, it will show the real URL, and not the one in the faked address bar.

And now comes the tricky part - when the phish site gets the username and the password, it removes the address bar 'overwrite', opens a legitimate eBay login page and submits the phished data. If a legitimate username/password are entered, the whole process would seem (to a regular customer) as a problem-free login to eBay - and this is why it is so dangerous.

Here, we have entered some bogus information and you can see how the legitimate page as rejected it. Notice the defferences between the real and the phished pages: