Not 100% sure how the scan happened, but I unknowingly due to malicious code/exploit had set approval for all to this account and several NFTs were drained. Opensea and Dune already flagged it as Stolen.
Address already flagged for selling stolen assets.