This was directly copied from throughthefire391 's thread in the Trades Chat
"As I was browsing the tp, i saw an item, clicked on the user, and on their lookup, a window opened up which said task something, but closed too fast for me to read it. I was then logged out, so i logged back it, making sure the url was correct, and change my pw. The trade was bonju items, and their wishlist said none. Beware. Dont go to userlookups you find on the tp. Im not sure the username, soz "
Heads up everyone.