Website flagged as malicious by FortiGuard(fortinet)– how to identify root cause and fix before whitelisting?

I am working as an intern at a startup and the website I am handling https://www.gazfull.com/ is being flagged as malicious by FortiGuard and getting blocked.

There is no intentional malicious content on the site. We want to fix the root cause instead of just requesting whitelisting.

What are the common reasons FortiGuard flags a website as malicious?

Are there specific security loopholes, misconfigurations, headers, SSL issues, third-party scripts, or deployment patterns that typically trigger this?

Also, after resolving potential issues, what is the correct process for requesting reclassification/whitelisting with FortiGuard?

Any guidance on debugging this systematically would be really helpful.