it hasn't been hacked then. they will have made a link for an item, then added your user name and feedback up the top.( the feedback may not even be exactly as yours check, but don;t log in) they message you, you click on the link and the idea is you put your password in for them to see it.