Not understanding how ETH was stolen from Phantom Wallet

Before I get called an idiot, hear me out.

$1800 in ETH straight up vanished 3 hours after I had received it and was sent to an unknown wallet. The $1800 in ETH came from a friend's coinbase and was sent directly to me. I've never bought anything on the Phantom wallet, I've only ever sent and received. I'm trying my hardest to figure out how the hell it's happened. Somehow the wallet is compromised, but I'm struggling to figure out how it's happened. The password is strong/generated by a password manager, I've not shared the private key or seed phrases (the wallet is a week old).

Nothing else was accessed, eg bank, email, any other accounts, just the Phantom wallet (which I have on a chrome extension and on my mobile, which I had downloaded last night).

The wallet that it went to has only seen IN transactions then whatever is the latest (explanations please)

https://etherscan.io/address/0xd924cC0A843a023ba07a436d779Ec1480Dc4c359

Anyone able to advise on where I went wrong?

Never been interested in nfts, airdrops (don't have a clue what they are), not been clicking or trying receive any free shit.

I've been trying to go over absolutely everything I did yesterday and the only thing I can think I went wrong was when I was researching the melania meme coin, I don't know if I had synced or logged in with the Phantom Wallet (that had $0 at the time) to a site when I was looking into ways to buy SOL. I had logged into ape.pro via the Phantom Wallet and I believe I had connected my wallet to uniswap. Something that stood out was there was a jupuary.jup.ag link in my history which I do not recall visiting and nothing prior to the website showing to indicate that I had purposely went out my way to visit.

Any ideas? Anyone able to look into the etherscan to find any clues as to who or what the wallet of the person who stole the money is?

Tl;dr: I'm new as fuck to crypto, have no idea how $1800 was stolen