This is my wifes business. She runs a Finance and Mortgage Services company.
Please advise what can be done.
I.e. There must be some way of determining which complete url was identified as malicious (if any), so that I may hunt it down and determine the cause.
Any domain hosted on afraid.org can be used by other persons for dns hosting without your control. It happened for your domain, it was misused for malicious purposes - in that case, when nobody has control on subdomains of domain (DNS hijacking), we block the whole domain in order to protect our users. For you, the solution is most probably only changing the dns hosting and letting us know later.