HELP!! Avast blocking my domain but not my site

[Jordan43]

Hey all, our site recruitwithatlas.com has been flagged as having malicious scripts (it’s Wordpress and it could be that we didn’t fully deploy headers initially, but this is now correct).

The problem is that all the sub domains are blocked BUT the websites where those subdomains are are not

for example my.recruitwithatlas.com is BLOCKED
However https://atlas-app-production-248fc50106d5.herokuapp.com/ is NOT BLOCKED (this is the site where the MY. sub points to)

How do we rectify this?

[DavidR]

Some security pointers reported here - https://en.internet.nl/site/recruitwithatlas.com/2651887/
Nothing reported here - https://www.virustotal.com/gui/url/eb2e37101727de05f60c0eab4d93a0570e39b7ce05c6e9bd52474978705185be?nocache=1

• Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
  You should get a response in a day or two.
• This may or may not be what Avast is alerting for - but you should certainly address this.