False positives happen all the time with these sorts of tools. We got flagged for phishing by AVG because we built a promotional website for a bank. Their reps were pretty nasty until someone from the bank joined in to vouch for us.