That particular topic's issue is due to a malwares based from his scans and he must have been blindly trusting what he paste without checking what he want to copy.
It can't be a derivation path issue since an Electrum's master public key is actually a child public key derived from a derivation path,
It is used to derive receiving and change addresses with: xpub/0/receiving_addresses and xpub/1/change_addresses, it cannot be changed without changing the code.
After reviewing his thread, it appears that he is receiving different addresses due to malware.
He confirmed it by scanning the PC with malwarebytes, which revealed 23 threats, so my plan of scanning all addresses from xPub will found nothing.
I am just trying to help him, but it appears that there is no way for him to recover his BTC.
Anyway, thanks for the heads up and the guide above. I may use this source in the future for the xPub scanner.