The Webmaster is definitely NOT sending any emails asking for Passwords.
Unfortunately it is too easy to fake emails that look like they are from someone else. There is a way to check the headers to see who an email is really from, but most people don't know that.
