[...]
If i were you I will try recover the account and setup 2FA by using app like Google Authenticator
The account is fully recovered and the scammer,
Saruc, bypassed the 2FA by token ID, which they got by faking MEE6 address. A better suggestion will be to always doublecheck a site address prior to inputting sensitive information.
-snip-
No, need I already fully access my account.
[...]