github really thinks they're doing enough to prevent this kinda crap. https://meertens.dev/blog/github-enables-domain-abuse/