If you haven't set up a wallet with coinos.io, then someone may have gotten your nsec, and changed your profile to direct zaps to their wallet. I can't be sure, but if no one has your nsec, no one should be able to change your profile. You can start a new Nostr profile, just in case. If it ends up being some other mishap, you can always come back to this one.