I have a friend stolen wallet just like you. The reason is that he has access to a spoofed address and when he receives the mail and accesses that link. He did not realize * .com and * .co, so he accidentally revealed his wallet.