Help with mobile only redirect malware infection

Hello,

I've been struggling to fix the mobile website only redirect infection.
website – open on phone, it will load fine & when you tap on menu or logo it'll redirect once.
attardefoundation dot org

What I did so far:

1. Scans with sucuri, gotmls anti-malware premium, quttera – all clean
2. Wordfence scan – it caught unknown php files in WP installation which are deleted now, nothing found in re-scan (High sensitivity)
3. Re-installed WP
4. Manually checked index, htaccess, wpconfig files – no suscipicious code there.

No issues on desktop. Any pointers?

Update: When I change theme, it did not redirect. Must be something in the theme. Just can't figure out where.