I'm trying to help my friend's boss get control of a website that's been taken over by a nefarious developer. I want to contact the host, but I haven't been able to figure out who it is. I checked the domain's whois, but the nameservers just point right back to the domain, which I assume means it's on a VPS or dedicated server. I told my friend to just check who the bills are payed to, but the company bookkeeper is on the developer's side. It's a bit of a mess.
Any advice on how I might be able to determine the host in this case? Thanks!