First up, thanks for your replies.
I did a quick check of my emails and can't see any suspicious phishing type emails. The laptop I recovered my account to is my work laptop which I wouldn't think would be comprised as it's only used for engineering related work. If something was to be compromised I would suspect it would be more likely my phone if it had to be one of the two. A point to note is that I only recovered my Jaxx wallet on the laptop after a few days of this whole ordeal.
Moving on, I can confirm that the coinbase to Jaxx transaction went without interference:
https://live.blockcypher.com/btc/tx/05be8a383229ccd7b70edc54585cc4e146490608fd7b839428fd8cd069a16766This was probably done 12 hours before the shapeshift attempt.
After the shapeshift took ages and with some funds reappearing in my account (shapeshift still unconfirmed) I did this Jaxx to coinbase transfer
https://live.blockcypher.com/btc/tx/05be8a383229ccd7b70edc54585cc4e146490608fd7b839428fd8cd069a16766This comes up with nothing, which is kind of expected as I think this falls into the category of a double spend if I'm trying to transfer the funds when they've already been sent to shapeshift.
Here's the bad part. Following th Jaxx support advice I reset my cache data in an attempt to resolve the stuck transaction. This deleted all my transaction history, until that is i recovered the account on my laptop. So I don't have the shapeshift transfer info. My Jaxx to coinbase doesn't appear on the transfer history either, I only have those details from my emails with Jaxx support. So at this point I create the laptop Jaxx backup. I log in a bunch of times to unconfirmed transfers and then on the 15th and 17th at the very time I log into my laptop Jaxx to check the status I have two sent transactions (when my account balance read 0 how was I able to send these). This is why I suspected that these two transactions were delayed from Sunday and not phishing. If you look at the addressess in the original message you can see the BTC sitting there. I feel if it was a hack then it would be spent or part of a larger value perhaps.
Anything else you guys need?
Again thank you for the support