You are dealing with customer support for some Aruba customer, i.e. not you. Why don't you contact police or the site owner instead?

If it's a hacked server, the owner has to notice the hack and ask for help cleaning up if necessary. You have no authority whatsoever, and if you attempt to stir up trouble about someone's web site, closing tickets is at the polite end of the response spectrum. You risk prosecution.

If it's a brazen criminal using their own host, they are the customer and the site is working as expected. No customer support required.