I was also phished when I brushed points in the exchange wallet last time. The tracking address was all transferred to this address. It's really impressive how skilled they are.