we've had this: cloudflare serving up pages on our own website saying we're bad and we're trying to phish our own customers how did they come to this bogus con

we've had this: cloudflare serving up pages on our own website saying we're bad and we're trying to phish our own customers how did they come to this bogus conclusion? they took some obviously bunk report from a "security company" at face value and it is super, super easy to trick the "security company" into sending a bogus report to cloudflare with any URL you wish which is then instantly applied against you