The weirdest thing is- I’ve contacted GoDaddy, and Hostgator and looked at the DNS records. The hijackers have taken my cpanel.mysite.com AND my FTP.mysite.com<> and both Host Gator, GoDaddy and Shopify have absolutely no records of these sites but clearly they exist. I’ve looked over the dns settings myself and it’s not there.
It’s as if there is an injected code that is making these sites? I looked into it on Google Search Console and I was able to view their verification process as a code.