One of my workers got an automated abuse report submitted by Netcraft, and Cloudflare mitigated it automatically by replacing my worker with a reported phishing warning. I requested review, and it has been in the "In review" state now for over 5 days. Netcraft has told me that they have confirmed to Cloudflare that it was a false-positive after a bug in their automated takedown bot. I have emailed abusereply as instructed, but no reply.
So my question is, how can I acutally get this reviewed and the mitigation lifted?
And this whole thing has me a bit scared, to be honest. Is it really this easy to get a legitimate service taken down? What do we need DDoS protection for, when all the malicious actor has to do is to simply submit automated abuse reports?