I still doubt that its either a phishing or scam.. he posted URL address for a attachment he got on his email..called nepalinewnote.jpg and since you can't view the image, because its in his email inbox, it takes you to login address. and IF you are logged in your hotmail already, and cookies in your temp, you will be logged in your hotmail. i don't think he's gonna get email with your passwords. !!