I prefer to report the website to their registrar and their hosting provider. I’m in the US so reporting to the FTC is fun, and the UK’s version of the same agency (can’t remember its name) is excellent as they’ll get the website taken offline quick.