Fix this week
A link on your page points to a look-alike address
This is the exact wording EverThread uses when it finds this on a customer's site, written for someone who runs a business, not a server. The example site here is yourbakery.com.
What we saw
A link goes to https://xn--pypal-4ve.com/login that uses special characters to look like another site.
Why it matters
This is the classic phishing trick. If you did not add it, someone else did.
How to fix it
Check the link below. If you do not recognize it, ask your developer to remove it and look for how it was added.
For your developer
Punycode/IDN link: https://xn--pypal-4ve.com/login. Verify intent; remove if injected.