Malware according to Fortinet’s: https://urlquery.net/report/52b7e50e-58ed-4147-a478-e567611479fc
Website has been properly configured CMS, but version is not the latest: WordPress Version
4.7.5 Update now. CloudFlare abuse?
detected jQuery libarary: http://retire.insecurity.today/#!/scan/3c7b236af8d84ae1ea951104f7d76c7e7f340f3fe51511990ea1cd16c08b9c27
B-Grade here: https://sritest.io/#report/aa38a466-2bf8-439d-94c0-b47f788c78d9
Just an issue with this script: htxp://fonts.googleapis.com/css?family=Open+Sans%3A400%2C400italic%2C700%2C700italic&subset=latin%2Cgreek-ext%2Ccyrillic%2Clatin-ext%2Cgreek%2Ccyrillic-ext%2Cvietnamese&ver=4.7.5
GoogleSafe:
OK Load:
19ms Server: 172.217.3.42
ESF ASN: 15169 United States
Google Inc. Reverse DNS:
-iad23s57-in-f10.1e100.net
F-Grade and recommendations: https://observatory.mozilla.org/analyze.html?host=www.albionguides.net
On the other hand Word Press spam is being prevented by using a nonce and Akismet 
polonus