reviving your comment. it's because of windows smartscreen. it usually flags anything remotely suspicious without a frequent download rate and/or signature. signatures are really expensive and high download rates are hard for projects like itch.io