False positive phishing block stuck in review for 3 months — Pages report was removed, domain report wasn’t(IDs inside)

**Report IDs:** * Domain — `a1449c15663bee85` — **still open, ~3 months, no response** * Pages — `ced15ef7e3238d6e` — **removed by Cloudflare** **Domain:** yieldsforge.com (registered at Cloudflare Registrar, hosted on Cloudflare Pages) **The block is scoped to exactly one URL:** | Path | Status | |---|---| | `/` | **403 Suspected Phishing** | | `/en/` | 200 | | `/blog/` | 200 | | `/privacy/` | 200 | | `/onboarding/` | 200 | Google Safe Browsing reports the domain clean. The interstitial carries `noindex, nofollow`, so my homepage has been de-indexed for three months. **What the site is:** Yieldsforge is an independent, non-custodial automation tool for the public Bitfinex Funding market. * It does not impersonate Bitfinex or anyone else — own name, own branding, and the footer states explicitly that it is not affiliated with Bitfinex. * **No passwords anywhere.** Google OAuth only; there is no password field on the site. * **No card or bank details.** Users connect their own Bitfinex API key, and the app *rejects* any key that carries withdraw permission — funding permission only. * **Funds never leave the user's own exchange account.** The service places funding offers over the API; it never takes custody. * The homepage is plain marketing copy: what the product does, backtested APY figures, and a docs link. **What I've already tried, over 3 months:** * Dashboard → Abuse Reports → Request a review (reason: misclassified) — no response * Support tickets — every reply says "we'll ask Trust & Safety to get back to you." T&S never does. * community.cloudflare.com — the consistent answer is that neither Community nor Support has visibility into T&S. * `abusereply@cloudflare.com` — no substantive reply