The connection is easy to make here.
OP states that everything is fine until he turns on the Cloaker. Some cloakers are easily detectable by Google.
Once you’ve got the compromised site error in your ad account you will need to get rid of that domain and white page. Google stores the information to improve their review bots.
The next time that you use the same whitepage and domain it will result in the same error.
Try a different cloaker on a fresh domain and whitepage

.
P.S: JS fingerprinting is a big deal when running GGL Ads!