I remember back in the days the HTTP proxy of Sun Microsystems used to have a similar page when something went wrong. Always tried to find it again, but failed.
Reading through the article, the "hacker" was pretty naive and junior, installing an EDR on his hacking box. Or it was just a way to distract you guys ;)
I caught that feeling through the whole article. Like, was this user really that distracted or inept to forget he installed a Huntress trial, or was this all for some larger, more insidious reason, or distraction?
Had more or less the same situation. My flight got cancled some 8 hours after my AirBNB booking. Story is similar, host refused to refund "no refund policy" and AirBNB trying to blame the host. In the end I went to PayPal, as I used them for payment. Opened up a ticket, explained the situation and after 5 days I received a full refund. AirBNB afterwards sent some two horribly translated E-Mails to me, explaining I might loose my account blabla, but nothing happend. Still I stopped using them.