[logn]

> Interestingly, the fake clinic domain name is VERY similar (one letter difference) to another, legitimate clinic in the city.

Contact the organization administering the top level domain and file a typo squatting dispute.

Also, most likely these SEO people will stop impersonating the doctor's office when it's clear they won't win the account (edit: they'll start impersonating a different doctor). Their mistake was picking up the phone call. It's common practice and arguably ethical to set up and optimize a placeholder site. Any pre-launch website with a link to sign up is doing exactly this.