Zwielicht
Elite Member
- Aug 31, 2013
- 21,128
- 40,576
So I searched for that hcl site and this came up:i just ask for virus scan for my account, after they do a scan they said no anything found AND i no have any backup,
after i check my other domain (in same web host account) all my site had that script and in same spot, and one more site is get mark "This site may harm your computer"
https://sitecheck.sucuri.net/results/novostrojka-a.ru
It said it's known javascript malware.
Are you by any chance using any nulled themes or plugins?
Excellent! Thanks for chipping that information in!You definitely got hacked. It looks like from the script you posted above it was performing some sort of session hijacking. The script was pointing to that hcl site.
Also, using WordPress for anything is quite risky. If you have any programming skills, just build yourself a simple CRUD style site using a popular web framework, and you'll be infinitely more protected than what you're currently using. I'm also in the movie niche. Just out of curiosity how much are you making per day?