How did I got attacked?

0xbc196e8208737587e73026e946f2d8072e61156c82b03fe67be256e3d1b13e0e

I have around $140 worth of ETH drained, I didn't sign any malicious contract, and my wallet have no malicious token approval, yet ym eth was drained and I got sent some wlfi token.

Just trying to figure out what happened

Edit: prior to my eth being drained, I signed some unlock agreement with WLFI, official project by Eric Trump on the site and a couple hours, it was drained.