Alt theory: It's an amplification attack on GAW, saw it happen to TDW in the past.
NPC posts "garbage" link on GA (could redirect to malware, one of those rando wordpress 'news' sites with bot-written articles, shill that dumbass coin, etc.).
NPC optionally reports thread to Snopes or other "fact" checker org.
NPC (with a support contract) or multiple NPCs brigade and report thread (by extension, GA) to their web proxy / AV vendor as malicious.
Shitty little foreign companies like Avast don't have the resources to research it, so they take it as fact and recategorize the site.
Alt theory: It's an amplification attack on GAW, saw it happen to TDW in the past.
NPC posts "garbage" link on GA (could redirect to malware, one of those rando wordpress 'news' sites with bot-written articles, shill that dumbass coin, etc.).
NPC optionally reports thread to Snopes or other "fact" checker org.
NPC (with a support contract) or multiple NPCs brigade and report thread (by extension, GA) to their web proxy / AV vendor as malicious.
Shitty little foreign companies like Avast don't have the resources to research it, so they take it as fact and recategorize the site.