Backups after removal

A client’s site where iThemes Security has been removed is now getting database backups twice per day (waiting to confirm with them if they were before it was removed). The plugin doesn’t exist so far as I can see (unless another plugin or theme has the code?) and there’s no WordPress cron activity set up.

SO how could this happen? Is it even a real backup (to nervous to open the ZIP file) – the site’s URL is slightly incorrect in that it’s been changed to be https but the email refers to http and the from email address in also slightly different in that it from an alias domain that redirects to the website.

Any ideas?

• This topic was modified 9 years, 6 months ago by Amibe Websites.