We’ve gone ahead and reached out to Twitter API support on this. If you haven’t, I’d recommend reaching out as well. Cloud9 can be used by abusers, unfortunately, so we’re hoping that they’d be able to block based on username rather than the entire domain.
We’ll keep everyone updated here.