Thanks – the site definitely is not media content.
I used the Sucuri malware scan and it didn’t find anything.
It continues to happen, 3 emails a day with similar things.
I like the idea of geo blocking – how can I do that in WP and/or in Sucuri?
Thanks again.