Cloudflare isn't even telling the police any of this information. They took it from OP, said "OK, we will continue to profit off this client," and swept it under the rug. They don't have to be the judge jury and executioner here, they should however pass that information along to said legal system rather than continue to turn a profit off of the criminal behavior.