Wow.

No offence, but how dense can you be?

He tried to make a fishy deal recommendation, and needed your password to see what domains you have? Have you tried just telling him?

I do not feel sympathy for someone who makes no effort to protect themselves.