I have done everything you listed with the exception of a firewall.

Will the firewall actually prevent this from happening or just make it a bit more difficult? Can something like this also be installed on the server end?

Sorry for the second post, thought this should have it's own.

Here is the problem I am facing amongst many others.

Let's take the search term "Air Jordan Release Dates 2017" and place it into Google Search.  Here is a link:
https://www.google.com/#q=air+jordan+release+dates+2017

Towards the bottom of the page, you will see a website that has SneakerFiles (my website) in the title.  The exact title is: Air Jordan Release Dates 2016, 2017 | SneakerFiles - Osce

Now, this is my content, but not my website. For some reason, Google thinks this is my site. If you click on the link in search, it automatically redirects you to another page (maybe 302 redirect), but in the cache you can see it's mine:
http://webcache.googleusercontent.com/search?q=cache:qrVEUDE1t48J:www.osce.gob.pe/take_p_firm.asp%3F+&cd=8&hl=en&ct=clnk&gl=us

I have blocked the websites IP, disallowed my style.css to be used so it just shows a links without the style, still nothing.

I have submitted multiple google spam reports as well as feedback from search.  At times, my page will return to the search but it gets replaced by this website.

I even filed a DMCA with Google, they declined it. I reached out to their Host and Domain register multiple times, never got a response.

The sad part about this, it's happening for other keywords, for example if you search "KD 9 Colorways", the first result is for my website but on another domain name (my website does rank 3rd for a different Tag page). The page I worked hard on keeping up to date.

I did notice this bit of javascript from the cloaked/hacked/serp hijacking website:

I disabled iFrames...(think this helps) so not sure how they are doing this.

Any help would be greatly appreciated.

Note: I am using Wordpress if that means anything.