I think we need to fight fire with fire.  I suspect that the scammer behind the .xyz site spammed google with "legal removal" requests, probably with a bunch of different google accounts.

I've just reported the .xyz site as malware using the link below.  I suggest we all submit a report, making it hard for google to ignore.

https://safebrowsing.google.com/safebrowsing/report_badware/?hl=en