No, it's not a hackerThey just put in the url wrong, which is dragcave.ath.cx/account. That url will display your own dragons if you are logged in. They really should have put in the address for their own dragons instead though, otherwise they won't be getting any clicks that way. Trust me though, nobody else can see your account page except for you.