It seems that you are attacked by phishing, immediately move the remaining tokens to another address.But you have to move fast in moving another token.Be careful now many hackers where.
First I thought it was a phishing attack but today I looked at my browser history and I couldn't locate the phishing website.