Same goes for me, and I emailed him and he said he would contact me after investigating.
Obviously Url was cryptomixer.io. Even if it's phishing,
The server was hacked, so we need to compensate.