Big oof.
How much effort would it be for them to create a new one and do it again?
Minimal, but it is the domain that gets blocked so the attacker would still need to purchase a new domain.
Would you like the admins to permaban them?
Oh, my bad! Also congratulations.

Looking into this, btw
One of our Admins still moderates their Reddit community, but we are also in regular contact with the other mods who chose to stay behind.
StarTrek.website typically sees 1-2 (approved) registrations per day. We have 12 approved in the past 48 hours.
We're not opposed to hosting non-Star Trek communities as long as they adhere to instance guidelines, but before you move you should know that the federation gap with .world is closing and should be finally caught up before the end of the week.
I think I speak for the whole admin team that we actually do hold instance owners responsible for the communities they host, the same way we hold Reddit (the company) responsible for the communities they choose to host. That said, we made the decision that (for now) the best practice for handling large general purpose instances like .world or .ml is to take a scalpel approach until such a time comes that the Threadiverse is more resilient.
While ostensibly a "general purpose" instance, users on Hexbear had a tendency to come to our hosted communities and aggressively push propaganda, unfairly burdening our mods, so it was a much easier decision to de-federate. We actually did announce that one because of their size.
(Also FYI in case you're not aware you are posting form lemmy.world so just to be clear none of these policies apply to your current account!)
EDIT: I also think it might be useful to highlight that we never take actions against other instances, we take actions for our users/communities.