Like I said:
So I don’t know what email address to use. And please don’t bother telling me, because I won’t be able to verify that it was actually linked to that profile.
Yes, it appears the domain was re-registered by the hacker shortly after I wrote my message.
I’m sorry, but there is nothing that can be proven here.
With some companies, it would be possible to regain control over the account for example through a verification text message to your mobile number, through your configured payment method, or by checking the contact details of your account against a government ID.
However, we don’t record any of the details needed to check that. So even if you were to give us a government ID, credit card number and mobile number, we still have no way to actually link that back to your profile.
If you owned your own domain name, you could prove your ownership of the domain through the domain registrar controls, and we’d release the domain for you so you could host it on your own account (it doesn’t prove the previous website was yours, but it does prove that you own the domain name now).
Injecting fake emails into a mailbox is easy and doesn’t prove anything. And saying that your account was suspended for no reason is such an obvious thing to say that we have a knowledge base article about it.
Also, the way I understand it is that there is no “hacker” who “hacked” your account, it was just your “friend” who you shared credentials with, and chose to use those credentials to take over the account.
That’s not “hacking”, that’s just you having been careless with your credentials and giving too much access to people who couldn’t be trusted.