Report URI found 15,579 infected websites and can't figure out how to warn them

We Know 15,579 Websites Are Infected. How Do We Tell Them?

Report URI has confirmed 15,579 websites running malicious JavaScript — card skimmers, ClickFix lures, iOS spyware loaders, and redirects — pulling in an estimated 135 million visits a month. Finding them is now easy; notifying them isn't. Responsible disclosure can't keep pace, security.txt adoption is low, and most emails go unanswered. Scott Helme is asking CERTs and the wider community for ideas on turning the data into action.