I wonder why he did not try to return empty responses to confirmed malware sources, to discourage them from using the site.