I’ve had to do help a client in a similar position. We got contact with the domain registrar’s phone support, took over an hour, “proved” we were the legitimate owner of the domain with credit card details along with other personal information the registrar knew but was not public. They changed the recovery email of the domain account temporarily so we could login and get control back.