The same sophisticated threat actor has pummeled the domain host on an ongoing basis since 2020, making off with customer logins, source code, and more. Heres what to do.