I really don't know if it was itch.io or some other stupid website, but less than a minute later after i download bloodmoney and run it i get 50 notifications from 50 different websites. Even if i turned it off, it just kept going back on over and over. I had to disable notifications completely.  I deleted bloodmoney since before i could open it, windows said "We have protected your computer from something something something" and the notifications went away instantly, So, what the fuck itch.io??

Itch, like Itch, never does that.

Unfortunately, as a self-publishing site, it's very difficult to be sure that all developers will respect your email or not try to take advantage of it.

The "correct" thing to do is to use the report button at the bottom of the page where you downloaded the game. That way, a report will reach the staff (the forum is usually not read or responded to by staff, so it's not a good place to try to contact them).

There is a fake of the popular game Bloodmoney indexed. You will find the original currently on page one in top row here https://itch.io/games

You should assume that every cookie on your browser was stolen and every saved password in your browser was compromised. Hackers can access your online profile and services with stolen cookies. If you have discord, you can assume that your discord profile is currently spamming scams. And so on.

It is also possible, that there are remnants that were not removed. That you got a warning from Windows is actually a good sign, maybe the damage is not as severe as I paint it. But that your browser went nuts is a very bad sign. It means that something happened, that could not be stopped.