I can imagine how API domain, woolstrand.art could get blocked - it is a web server after all, which could be hacked by someone.

ealruinsv2.sfo2.digitaloceanspaces.com is an internal digitalocean's domain with a read-only bucket, so if it is really malicious it means the whole digital ocean thing is hacked in and out and in this case you should better never enter internet again :)

So I suppose it's a false-positive alert or this url was added to the database because "oh I don't know what this url does so I should better report it as a... hmm.. phishing!"