[msephton]

Interesting, the source is (a subdomain on) the Ghost blogging platform.

[ChristopherDrum]

Author here. Yes, I don't self-host exactly because I was hoping to avoid stuff like this by relying on a more robust back-end than I could provide.

[ameliaquining]

Unfortunately even a managed host like Ghost doesn't have much ability to help you with this particular problem; your particular site is treated as its own separate thing in malicious-site databases. (Since, after all, there's nothing stopping a bad guy from hosting a phishing site on a ghost.io subdomain.)