but why its still unspent?
"Unspent" means nothing more than "the funds are on that address". It's like having $1000 in the attacker's wallet, it's unspent until he spends it.
do you think its possible to write to every single crypto market to report this adress ?will it work out?
No. See
much longer answer.
thank you for your attention!
seems like its 100% lost. good lesson. expensive one.