> My downfall must been related to Cloudflare Workers. I used it to create some apps including proxies that modified mainstream news websites. They acted as uBlock + Stylish for locked down computers where I could not install browser extensions. I did not share these with anyone, but I did not secure them with HTTP auth. I didn't think anyone could guess the xyz.abc.workers.dev URLs to access the proxies but automated software must have detected them and flagged them as phishing sites

Strange, Cloudflare has an official worker template to do just that (sans modifications): https://developers.cloudflare.com/workers/templates/pages/bu... Sounds like officially endorsed use case to me.

In fact I was thinking about doing the same the other day, but haven't gotten around to it...