Your account was found among a huge list of almost 4k compromised accounts in a hacker botnet. BUT ... because of how the blockchain works and its limitations, we can't tell if your vote is simply trailing a hacked account or if you yourself are hacked. This is because we can't see what prompted you to vote, if it was a trail or a script.
If you've never used any websites aside from those you've listed, then you're ok. The downvotes from mack-bot are small and removable. This is one of those cases where the risk to the account if they are actually hacked is very high but the inconvenience of dealing with mack-bot and this whole confusion is minor in comparison.
The intentions of some people on this platform are complete shit. That's why we've got hackers and scammers in the first place. The only way to win is to be resilient against them. We've successfully fought off massive phishing attacks before and we'll get through this one.
Ok, I was really surprised the only thing I do that could be considered wrong is using some images mostly free ones but I always place the source, apart from that I do post Actifit but if someone downvotes that, I really don't care as I don't do that for the rewards which are in fact very small, I post because I like to keep track of what I do, in fact I don't think I will post those next year, I had set a goal and I already completed it. Yes you could say my posts are shit posts, I actually don't see much quality in them, but if somebody does that I guess most of the daily posts would be downvoted.