phishing page hosted on github pages, ransomware

privsnote.com is fake clone of privnote.com

;QUESTION
privsnote.com. IN A
;ANSWER
privsnote.com. 59 IN CNAME privnote-mirror.github.io.
privnote-mirror.github.io. 3599 IN A 185.199.111.153
privnote-mirror.github.io. 3599 IN A 185.199.109.153
privnote-mirror.github.io. 3599 IN A 185.199.110.153
privnote-mirror.github.io. 3599 IN A 185.199.108.153

unfortunately my boss sent me an rdp workplace login by this site, due to covid, and someone logged at night and put ransomware on whole office sharedd hard drives.
why github doesn’t do anything with this hackers? i sent ticket few days ago still no answer.
this is a known problem https://www.proofpoint.com/us/threat-insight/post/threat-actors-abuse-github-service-host-variety-phishing-kits
is github new bulletproof hoster for cybercriminals?