Analyzed the header with whatismyipaddress.com
Great tool by the way.

I don't think this site is compromised. Some people make their emails public and this makes them easy preys for phishing attacks.