Is the Communities page, infected?
***** update: a comment reply said that derp foo is a name of a lemmy instance, so i’m sort of positive this was a false positive for a community hosted there getting flagged. what an idiotic thing to name your web asset, as it must get flagged all the time.
Admin of derp.foo here. My best guess is Hetzner gave me an IP that had been used to host a botnet C&C before. As a precaution I switched to a new VPS; please contact met via matrix at @irdc:tchncs.de if the problem persists.