Oh no, that sucks. I am glad you have your account back. This reminds me of the time when someone was prompted to enter their GitHub password, but it was a phishing page. Their password manager helped because password managers check for an exact match of the domain.