Custom domain website listed as malicious/phishing

Hi, our website is hosted on Squarespace, and connected to our custom domain. In the last month it has been blocked for some of our team members due to malicious/phishing warnings. Currently it only works for some team members but not all of us.

According to virustotal graph it appears that one of the public DNS IP (198.49.23.144) from squarespace is detected as malicious. The IP address comes from here https://support.squarespace.com/hc/en-us/articles/205812378-Connecting-a-third-party-domain-to-your-Squarespace-Site#toc-step-6---add-the-a-records

We believe it's a false positive. Is this something squarespace can help fix?

Custom URL: https://www.seonhealth.com/

Please contact Squarespace Customer Support using a support ticket.

Webroot anti virus software, part of Open Text, blocks all Squarespace websites because the generic Squarespace IP 198.185.159.144 and 198.49.23.144 are marked as hosting malicious content, spoofing websites, or even a botnet. Webroot software is used by millions of people, who are now unable to visit any Squarespace website. As Webroot actively shares this information with other security providers, the impact of this will only grow. Can Squarespace please take action and protect the reputation and availability of all Squarespace domains and actively reach out to security providers blocking them?

Hi @paul2009, This is not about a custom domain. Webroot blocks all Squarespace websites.

In my opinion, redirecting this topic under "custom domain" does not reflect the seriousness of this issue. In fact, is does not have to do anything with a custom domain. The issue deals with the generic Squarespace IPs.

I am having the same issue! Please SquareSpace, resolve this ASAP! I am a website designer and my clients are furious! Their websites in Germany are not being accessed by several of their clients. This has a horrendous impact on their businesses and on mine too, after all I am the one who recommended hosting their sites at SquareSpace!

Same issue here. I took 3 days build my website and now people get security warning.

I'm not happy

I've built a website which can't be accessed by my clients due to this issue. Is there really no resolution still??

Happened to visit this forum again so I'll update my experience on this. Unfortunately squarespace customer support wasn't able to help. They said this was out of their scope.

What we ended up doing was to go through the list of security vendors provided by VirusTotal and contact those that flagged our domain as phishing manually. Also reached out to users who were blocked and asked for a screenshot of the block message. They usually show the vendor names, so contacted those too.

It would be great if in the future Squarespace support could do something similar for us. And of course Squarespace should take actions to make sure their 4 public IPs are always healthy.