If you have created a temp account and contacted support requesting a pass phrase reset you should get a response from support soon. As you now know you should never use the same credentials for any other account, you SR pass phrase and pin should be unique and complex enough to prevent others from gaining access to your account. I hate to say it though but there is a strong possibility they did FE your order so that they could post the phishing link in your feedback. I hope you get control of your account restored again soon.