A client's email address has recently been spoofed and the client has been getting the bounced emails. I understand that, a couple of weeks ago, phishing emails were indeed being sent from the server, but as soon as the client alerted me to the issue, all passwords were changed and two-factor authentication was set up. I've been in communication with the hosting company who are sure that no server resources are being used to send phishing emails. They are sure that it is now a case of email spoofing. However, Browser Guard has now identified the site as the source of phishing emails. This is a medical website and clients need to be able to get in touch with their surgeons. Is it possible to ask Malwarebytes to check the site?
Here's the error message I got in Firefox a few minutes ago.
