I highly doubt any one is trying to fish for passwords. What would they gain? NOTHING! Not only is this login required for owners of the auctions but for potential buyers as well. EVERYONE sees this. Did someone request a support ticket for this? Let me know what they have to say.