Need suggestion client provided phishing link

[mohmadrahman]

Client gave me access of his previously bought domain & hosting from namecheap Easy WP.after clicking the link which i found in my email my antivirus 
found phishing content which i attached in the file section. Now the customer is saying that he messed up with this & dont know the difference between
wordpress & hosting plan . Although Customer has already deposited a 50 dollar milstone payment in the fiverr . Now what would be my next step . I am 
a bit confused whether he is acting like that or he is really messed up.
 

[xotatech]

The best way is asking him. If he is a real buyer, then it will help him a lot.