Blocked the impersonating domain and provided information on the benefits of upgrading to a more advanced spam filter to the key decision maker.
Replaced the Power Supply and cleaned up the system.
Customer could not be reached after two weeks of repeated contact, thus no resolution can be provided at this time.
Enabled Security Defaults for the tenant, which will greatly improve the customer's security posture.