So there is a database of content and links that's being uploaded to hacked websites.
In this database is my client's URL and I'm positive this is the reason he can't rank for anything of value.
These links are so toxic, if I even put one in a Google doc, Google will flag it immediately with a huge warning banner,
and they will send me an email saying my account is at risk for sharing this kind of thing.
At first I sent take-down notices to these websites' hosting providers letting them know about the malware,
and while that worked, I noticed for every site I successfully got the data scrubbed, two more popped up in GSC.
I've disavowed the links but that doesn't seem to have helped. In the old days you could actually send an email
to Matt Cutts or his team for special situations like this...
Is there anything else I can do?