Account was held by an escrow & changed password, then I did.
Another password change happened instantly after I realised I signed up on a phising site.
This look suspicious I guess so I'll just lock the thread.