> Cloudflare has been useless (as usual).
They see themselves as "neutral" and just forwards all reports to the hosting provider unless it's directly hosted by them, still worth to do though if the hosting provider isn't bulletproof (another option is going to the registrar)