Sorry that it happened, the guy who sent phishing url is Dzeros. I will workout with Quickseller to get him.
And I appreciate, that Quickseller was fast enough to get it back.
Regards,
Alex.
PS: sry about username, was in a hurry to post alerts and misspelled it