If you don't have referral for other users here in crypto better for you to read first their social site because there's a link about there site so for your security and assurance that their site or that's real,In 2fa i think create an account with different yahoomail and password then create again if you going in other site or use other site
Always create separate email addresses for exchanges. Also don't link your mobile phone number to the email address as it can often be used to get a password or account reset text. Phone-jacking is getting more common. Often only the ESN number of the phone is required to get the number ported to another phone.