That's most assuredly a hoax e-mail. I recommend never clicking through an e-mail link. I make a practice of only accessing Auctiva, Auctiva Commerce, Ebay, PayPal, etc. only through an URL I have typed or established as a bookmark. If the e-mail info has any validity, it will be referenced on the site as well. As you mentioned, always look for "https://" in the address before you ever type anything involving a password.
I speak from unfortunate experience. 4 years ago I was apparently careless at some point and had one of my Ebay accounts hacked. Fortunately, I suffered no loss, but it certainly made me extra, extra cautious from that point on!
Good catch on your part! Good luck!!