One of my .xyz domain was taken down because one it somehow ended up on a single spam list as Phishing (it was not hosting any phishing, and all the code is actually open source).

I never was able to get it cleared. It's crazy the power that those spam list can have and they care very little about false positives