Not sure if it is falls into category "don't get phished", I'd recommend to switch personal accounts 2fa to webauthn instead of TOTP one.
Should help to catch phishing ealrier.
And sorry if missed that in anywhere previous comments, a lot of content is there.
Hope you are ok after all that stress.