She bought fmp from someone.
Person clicked link.
Person noticed it so they input that in username or password

Question is. How did you get that without the : space in between. Unless his fmp allows the password spot to be empty