It looks like cloudflare wont help in this case.
I have the same issue. I reported the abuse to cloudflare and waited 2 weeks and got this response.
“Matthew Gall (Cloudflare Trust & Safety)”
“Cloudflare is a network provider, and does not host websites or content. We have no alternative information to provide for the hosting provider indicated, as the information is sourced from a WHOIS lookup of the IP address against the public WHOIS database.”
So for me it seems like cloudflare like to protect criminal acts.
But try to get if you see if there is any information about the domain register.
Email/call the register.