I was developing a web app on a domain ("secure.example.com") and I moved over to a newly-registered domain.
Chrome flagged it as phishing. I've (1) submitted a request to Google via Search Console and (2) added a link from the main domain.
Is there anything else I can do to prove I'm not a phisherman?