I am currently working on beautynationpl.com which got maliciously redirected to a malicious site. I am hosting it on Hostinger, where another of my websites thebeautynation.com has the same issue also. I suspect that the Hostinger server might have an issue also, as I am hosting both of the websites on the same server, and my other server (another website) does not have this issue. However, contacting Hostinger only pushes the problem to me, they never help to fix the issues. Is there any idea from you guys to check what happens to the malicious redirection?
*The issue does not happen every time, and mostly when I try on incognito, it redirected, but after awhile like 10mins idling, refresh and it stops redirecting again
Malicious Request from Network Tab
Malicious Request URL:
https://sources.readytocheckline.com/zbLzKF
There’s no point looking into how the malware works or where it’s pointing, the bottom line is your site has been hacked. It’s most likely due a plugin you were using that was abandoned or not kept up to date in a timely manner (and unlikely to be Hostinger). If you were running multiple sites in the same account, all sites in the account will generally get infected.
Install Wordfence and run a scan. You need to find where the vulnerability is, remove it, and only then clean the site.
Audit your plugins – check changelogs, remove any nulled software, remove anything that hasn’t received an update from the dev in 9 months or more.
(worth mentioning – if you used any nulled plugins [wp rocket?] or themes, that pretty much guarantees the hack)