Okay, so I cleared the cache (since securi was pulling up a cache version of the website from when I checked it with cdn.
Now cache is purged, cdn is disabled and site is now clean.
Now force a rescan and you will see it is no infection.
Really strange.