Domain Hijacking Alert: Protecting toolkitfreetrial.com — An Open Appeal to Shopify and Tucows Compliance Teams

This documentation is prepared to assist the Compliance and Legal departments of Shopify and Tucows in resolving a clear case of domain hijacking. My goal is to work with these industry leaders to restore my business asset under ICANN regulations.

Section 1: Proof of Domain Ownership & Registration Details

The foundation of this case is the legal ownership of the domain toolkitfreetrial.com. I purchased this domain legally through the reseller Vidohost.com on April 12, 2026. Below are the verified transaction details as per the official invoice:

• Domain Name: toolkitfreetrial.com
• Registration Period: 1 Year (Valid from April 12, 2026, to April 11, 2027)
• Registrant Name: Vikas Kumar
• Invoice Number: #64024
• Payment Method: Cashfree (Reference: 5350872041)
• Payment Status: Fully Paid (Amount: 212.16 INR)

Note on Purchase: I utilized a legitimate promotional offer during checkout (Code: COM456), which provided an 80% one-time discount. The transaction was completed successfully, and the domain was active and under my control for 22 days before being unauthorizedly locked.

invoice Proof

I am sharing additional proof of my ownership of toolkitfreetrial.com:

1. Hostinger’s email dated April 12 confirming I connected toolkitfreetrial.com to my Hostinger website.

2. Hostinger’s email dated April 13 confirming my business email [email protected] was created and ready — proving I was the active domain owner.

3. Hostinger’s alert email dated May 8 showing “incorrect DNS settings” — this is the exact date my domain was hijacked by the reseller Vidohost.

These three emails together prove that I am the legitimate owner and the domain was fraudulently taken from me. 

Section 2: Proof of Manual Labor & Custom Web Development

The domain toolkitfreetrial.com was under active development and was being built with high-quality standards. It was NOT a parked or empty domain.

• Professional Alignment: I had already secured a Semrush Manager’s approval for the site’s layout and affiliate structure on May 4, 2026, proving the project’s legitimacy.

• Custom Build: The homepage and 10 core landing pages were developed using custom code (HTML/CSS/JS) for maximum performance.

• Content Strategy: I was using the Kadence Theme on WordPress to create articles and establish branding before the official launch.

• Reseller’s Excuse: The reseller (Vidohost) claims the site was “not indexed,” which is irrelevant because the site was still in the pre-launch design and content creation phase.

In addition to the custom pages, I had already created and published 14 detailed blog posts using the Kadence Theme on WordPress to establish the site’s authority and branding.

Section 3: The Timeline of Negligence & Intentional Ghosting

Despite being a paying customer with a fully developed business asset, I have been subjected to intentional ghosting and service denial by Vidohost. The timeline below proves their lack of support and deceptive tactics:

1. The Shutdown & Support Failure (May 8, 2026)

• The Incident: On May 8, 2026 (02:13), my domain nameservers were suddenly altered, taking my business offline without any prior notice.
• Ignored Tickets: I immediately reached out to Vidohost through their official portal. I opened multiple tickets across the Billing, Sales, and Support departments (Tickets: #VH-PQE-886900, #VH-BUI-530006, #VH-NTK-540951).
• Unfair Closure: Instead of providing a technical resolution, the staff repeatedly closed my tickets without a single helpful response.

2. Tactical Stalling on WhatsApp

• First Contact: After being ignored on the portal, I contacted them via WhatsApp. For two straight days, they gave the same generic excuse: “We are checking the issue.”
• The Block: As soon as I started demanding a concrete resolution, they blocked my primary number, cutting off my only remaining line of communication.

3. Forced Public Exposure & “The 2nd Number”

• The Response: Seeing no other choice, I published an expose article and shared my experience on Instagram to warn others.
• Re-engagement: It was only after I contacted them from a second number and shared the links to my public reviews/expose that they finally engaged in a conversation, promising to “contact me soon”—another stalling tactic that resulted in more deadlines being missed.

🔗 Verification & Evidence Links

For complete transparency, I am providing direct links to the public reviews, social media exposes, and official complaints I have filed. Anyone can verify the authenticity of this case through the following resources:

• Public Expose & Live Review: Vidohost.com Review: Is Vidohost a Fraud?
• Instagram Evidence Thread (Account now deleted by Vidohost): Post 1, Post 2
• Trustpilot Detailed Experience: Trustpilot Review Link
• LinkedIn Professional Expose: post 1, post 2, post 3
• Official ICANN Compliance Case: Case #01603605
• Tucows Support Ticket: Ticket #10616487

Section 4: The Institutional Failure (Tucows & Shopify)

When the reseller (Vidohost) stopped responding, I approached the upstream providers—Tucows (Registrar) and Shopify (Service Provider). Instead of protecting a legitimate owner, they chose to hide behind automated emails and rigid protocols.

1. The Discovery: Tucows IANA 69 & Shopify Provider

I performed a WHOIS lookup and used the Tucows Provider tool to identify the chain of command. The results clearly showed:

• Registrar: Tucows Domains Inc. (IANA 69)
• Registration Service Provider: Shopify

2. First Rejection from Shopify (Ticket #66811493)

On May 8, 2026, I contacted Shopify Support. I clearly explained that Vidohost had locked my domain and was ghosting me.

• Shopify’s Response: Advisor Elena F. confirmed that the clientUpdateProhibited lock was active but claimed Shopify “doesn’t have access” to third-party accounts.
• The Brush-off: They told me to simply “keep trying” to reach the person who had already blocked me.

3. Second Failure: Confirmed Ownership, No Action (Ticket #66849855)

On May 9, 2026, I contacted them again with overwhelming proof.

• Ownership Confirmed: After reviewing my invoice and details, Advisor Ivan M. officially stated: “Your invoice confirms you are the legitimate owner of toolkitfreetrial.com.”
• The “PIN” Trap: Despite confirming I am the owner, they demanded a 6-digit PIN from a Shopify Storefront. I explained multiple times that I use a custom-coded site on Hostinger, not a Shopify store, so a PIN is impossible to generate.
• Refusal of Alternatives: I offered my Government-issued Photo ID (PAN/Aadhar) and an Email Challenge to prove my identity, but they refused every single alternative.

4. The Final Verdict from Shopify

Despite knowing that Vidohost.com had blocked me on WhatsApp and was acting in bad faith, Shopify ended the chat by saying they could not make exceptions. They left me with a hijacked domain and a dead business, choosing protocol over justice.

Section 5: The Ticket Black Hole – Tucows’ Failure to Act

Despite reaching out to the primary registrar, Tucows (IANA 69), on a daily basis and providing iron-clad evidence of the hijacking, I have been met with nothing but automated silence.

1. The Endless Loop of Ticket Numbers

I have opened multiple tickets to report this fraud, but instead of a resolution or a human response, I am only being assigned new ticket numbers. My case is currently documented under:

• Ticket #10615932
• Ticket #10616487 (Primary Case)
• Ticket #10624726
• Ticket #10631206

2. Zero Response on the Evidence Portal

I was provided with a personal secure ticket portal (Freshdesk) to upload my sensitive proofs and details. I added a password and uploaded every single document, including the reseller’s fraudulent claims.

• Evidence Portal Link: https://tucows7565.freshdesk.com/support/tickets/10616487
• Status: It has been over 4 days, and despite my daily updates, not a single Tucows representative has replied.

3. Reporting the Reseller’s Deception

I have consistently updated Tucows that their reseller (Vidohost) is actively blaming Tucows for the domain termination to hide their own illegal lock. Even after exposing this “Blame Game” with screenshots, Tucows has chosen to remain silent, effectively protecting a rogue reseller over a legitimate domain owner.

Section 6: The Failure of ICANN (Case #01603605)

When Shopify Advisor Elena F. officially directed me to ICANN on May 8, 2026, I followed the protocol immediately. I believed that the international body overseeing domain registrars would take swift action against a rogue reseller.

1. Formal Complaint Filed (May 8, 2026)

Following Shopify’s advice, I filed a formal “Domain Transfer/Management Dispute” complaint.

• Case Number: #01603605
• Reason: Unauthorized clientUpdateProhibited lock and reseller non-responsiveness.

2. The Result: More Silence

It has been 4 days since the filing. Despite ICANN being the final authority, I have received:

• No human follow-up.
• No pressure exerted on the registrar (Tucows) to release my asset.
• No status update on why a verified owner is being denied access to his business.

Observation: If the governing body (ICANN), the primary registrar (Tucows), and the infrastructure provider (Shopify) all fail to act simultaneously, it creates a “Safe Haven” for scammers like Vidohost to thrive.

Final Section 7: Conclusion & Final Demand (Call to Action)

I have provided every invoice, every chat log, and every technical proof. My domain toolkitfreetrial.com is being held hostage.

My Final Demands:

1. Tucows.com: Manually remove the clientUpdateProhibited lock immediately.
2. Shopify.com: Terminate your relationship with the fraudulent reseller Vidohost.com.
3. Vidohost.com: Hand over the Transfer Authorization Code (Auth-ID) and compensate for the 4+ days of business loss.

Legal Action: If my domain is not restored within 12 hours, this evidence hub will be shared with the Cyber Cell (India), MeitY, and through a formal legal notice to Shopify India and Tucows Inc.

“All digital evidence, including time-stamped chat logs and original invoices, have been notarized for legal proceedings.”

Date 14-05-2026 Update

Official Ownership Verification and Technical Resolution for toolkitfreetrial.com

The status of my project has moved beyond the initial reseller dispute; it is now a matter of finalizing the technical transition within Shopify’s secure infrastructure to ensure full operational access.

On one hand, Jason Lamis Magsino (Support Advisor) under Ticket #66953410, verified all my legal ownership proofs and confirmed that the domain is now safely managed within the Shopify OpenSRS Dashboard.

He personally connected the domain toolkitfreetrial.com to my authenticated Shopify store (een5g3-fu.myshopify.com). In fact, when I initially requested a Nameserver update, Shopify’s team insisted that I first connect the domain to my store before they could proceed with registry-level changes.

Jason Lamis Magsino Chat Proof

However, as soon as the domain was secured and connected, Amanda (Shopify Technical Expert) completely flipped the narrative. She is now claiming that the domain belongs to “another party” who allegedly purchased it through Shopify. This claim is technically impossible and logically flawed. This was a fresh domain that I first searched for on GoDaddy, but chose to purchase through Vidohost.com on April 12, 2026, due to a promotional offer. If this domain truly belonged to someone else before that date, how was I able to register it, connect it to Hostinger, and run my website successfully for over 22 days?.

I have provided every piece of evidence, including my Invoice #64024, which matches the WHOIS registration date perfectly. If Shopify insists this domain was already owned by another party, I challenge Shopify to provide proof that anyone else purchased toolkitfreetrial.com before April 12, 2026.

If it was not available, it should have been impossible for me to acquire it and manage its DNS records for three weeks. Furthermore, the fact that Jason was able to generate a unique Auth/EPP Code for me and link the domain to my account yesterday proves that Shopify’s own system recognized me as the owner until this sudden and suspicious reversal.

“I have now even activated a paid subscription for this store to demonstrate my commitment as a legitimate merchant. I trust that the Shopify Higher Support team will quickly rectify this technical inconsistency and allow my business to go live.”

CONSOLIDATED PROOF OF OWNERSHIP

To eliminate any remaining doubt regarding the ownership of toolkitfreetrial.com, I have taken the following proactive steps to demonstrate full administrative and financial control over the asset:

1. Transition to Paid Subscription: I have successfully activated a paid Shopify subscription for this store. This further proves my identity and commitment as a legitimate merchant. The billing records clearly show that Shopify has accepted payment for a service tied directly to this domain.

2. Live Dashboard Control & Store Identity: The Shopify admin dashboard now reflects the store name as toolkitfreetrial.com, managed under my verified name, Vikas Kumar. The domain is listed as “Connected” within the Shopify infrastructure, which would be impossible if the domain were owned by an “external party” as previously claimed.

3. Direct Administrative Management: I have full access to the backend settings, including the ability to modify the storefront and personal details. The “Connected” status and the presence of the domain in my Shopify settings are real-time evidence that the domain is currently mapped to my specific Merchant ID.

4. Technical Conflict (DNS Lock): While the domain is fully authenticated in my account, I am currently facing an “Invalid DNS” status. This is not due to a lack of ownership, but because of a registry-level lock (clientUpdateProhibited) that was placed during the recovery process. I am now working with the Higher Support team to resolve this final technical hurdle.

With a live paid subscription, verified account details, and the domain successfully linked to my dashboard, the evidence is irrefutable. I am the sole rightful owner of toolkitfreetrial.com, and I look forward to the Higher Support team finalizing the DNS transition.

🚨 CRITICAL UPDATE: The Corporate System is Failing — Shopify Confirms Fraud but Refuses to Act! 21-05-2026

I have provided more bulletproof evidence than anyone else possibly could, yet the corporate giants are playing blame games while an unauthorized reseller literally stole my digital asset.

Here is the shocking turn of events and the official response from Shopify’s Support Manager, which exposes how these platforms operate:

1. The Ultimate Corporate Hypocrisy (Shopify’s Confession)

After escalating the case, a Shopify Support Manager (Charlene B) finally responded. Instead of resolving the technical issue created by their own system, she completely dismissed the previous resolution.

• The Backtrack: On May 12, a Higher Support Specialist from Shopify (Jason) verified my ownership, successfully linked the domain to my account, and generated a transfer/Auth code. Now, a Support Manager claims that Jason’s actions were “incorrect” and that they cannot honor the transfer code because the backend registry details don’t match.
• Changing the Rules: How can a trillion-dollar company’s system allow an agent to verify ownership and generate an official Auth Code if I wasn’t the rightful owner? They are calling their own team’s work “wrong” just to protect themselves from a technical mess.

2. Shopify Officially Labels Vidohost as an Unauthorized Scam

In their official statement, Shopify explicitly confirmed what I have been screaming from day one:

“We can confirm that Vidohost has no partnership with Shopify, and is not authorized to sell or manage Shopify-affiliated domains.”

So, Shopify admits Vidohost is a fraudulent, unauthorized entity selling their assets. Yet, because Vidohost manipulated the backend registry (OpenSRS) and put someone else’s name, Shopify claims their “security features” prevent them from fixing the DNS or pushing the transfer through. They are literally letting a scammer keep my domain under the guise of “security rules”!

3. They Told Me to Just “Give Up” and Spend More Money

Instead of taking responsibility for their unauthorized reseller or their internal system conflict, Shopify’s official advice to me was:

1. Go file a chargeback/refund with my payment provider for Invoice #64024.
2. Buy a new domain directly from Shopify to “avoid third-party reseller risk.”

My Stand: I Will Not Back Down

No independent blogger or web developer provides the level of transparency and proof that I have shared on this public forum. I have shown paid invoices matching creation dates, live dashboard accesses, and internal email logs.

If Shopify and Tucows think they can silence an independent creator by locking accounts and citing internal policy mismatches, they are wrong. I am taking this official confession from Shopify straight to the Tucows Tiered Access Compliance Team and filing a formal dispute for contractual failure and identity manipulation against Vidohost.

The community needs to see this: Legitimate purchase means nothing to these platforms if a reseller decides to scam you. If Shopify officially claims they have “no partnership or connection” with Vidohost, then a massive question arises: How was Vidohost legally able to provision and sell a Shopify-managed domain name directly to me in the first place? If the domain is currently sitting within Shopify’s infrastructure, how can they blindly state that the owner is someone else without providing a shred of counter-evidence?

I have provided absolute, undeniable transparency—paid invoices, active dashboard logs, and timestamped email verifications. If Shopify claims another party owns my asset, where is their proof? Why are they refusing to show the counter-evidence while hiding behind arbitrary “security features”? By validating a hijacked registration backend over a legitimate customer invoice, Shopify is actively getting its hands dirty in a scam orchestrated by an unauthorized reseller.

The most alarming part of this corporate nightmare is how easily Shopify backtracked. They literally threw their own Higher Support Specialist (Jason) under the bus, calling his technical verification and generation of the Auth Code a “mistake.” If a trillion-dollar company can bypass its own internal technical verifications and allow an unauthorized reseller to manipulate domain titles overnight, then no independent project, no domain, and no business is safe on Shopify. I will permanently BOYCOTT Vidohost.com and Shopify for this corporate fraud.