Was also flagged recently.
In my case it was the root domain which is

1. Geofiltered to only my own Country in Cloudflare
2. Geofiltered to only my country in my firewall
3. Protected by Authelia (except the root domain which says 404 when accessing)

So....IDK what they want from me :p My domain doesnt serve public websites (like a blog) destined for public consumption...