> People don't treat big tech this way; you don't think "oh, there's malware on Github, let me just report github.com as a suspicious website that nobody should be able to visit anymore"

> The correct answer is probably the abuse contact shown in the WHOIS data. That's programmatically accessible and thus scales

... They don't treat Github that way either. You mean to report the domain as abusive to the registrar?