sydneyavspecialists.com.au

Can anyone explain me how they are hacking/phishing and am I safe? I came across a very well structured attack and I think I am safe but need to be sure. I got a query for website development and digital marketing when I responded to that mail got a very well structured requirements for the project to be done. I thought it was genuine but still had some doubts that a company was still using Gmail I'd for communication and the name also sounded fake. I ignored that and moved forward with the communication. After few email communications they sent a calendly link on their website to schedule the meeting which is also a standard and I thought there is no issues in it. The website calendly link was the main hacking/phishing part. When I clicked on link a normal calendly link opened to schedule the meeting with date and timing to schedule the meeting and a Google sign-in button. The Google sign-in button was the main hack, when I clicked on it normal page opened to input email id and password. Issues in that pop up I could not see the full url. On clicking inspect element wierd things were happening(this I did after login). Now the part, what happened after login Automatically Phantom wallet extension was added to chrome, Gmail account automatically created offline backup codes, authenticator added. What I quickly did after this happened - Reset password, deleted authenticator, deleted backup codes, enabled 2 factor, removed Phantom wallet extension. Now I want to know am I safe or any other steps need to be taken? Also sharing the link if anyone can explore and let me know how did they do it. Check it at your own risk and I told you the things it did but still can't identify what it did and I can't identify. Link - sydneyavspecialists.com.au/calendly?token=ey4mPsFgWxnSXL7b