Website shows default "Welcome to nginx!" page - account if0_42062124

Hosting Support
1

Website URL

https://simbakarate.it/

Error Message

Both simbakarate.it and simbakarate.infinityfree.me show the default “Welcome to nginx!” page instead of my WordPress site.

Other Information

The site has been down for about a week. It worked until late September. I haven’t changed anything.

  • Account: if0_42062124
  • Client area status: Active, both domains listed
  • Website IP: 185.27.134.127 (DNS resolves correctly)
  • Nameservers: ns1-ns5.byet.org (unchanged)

Could this be related to the “Account stuck in processing” incident? Please check and restore my account on the server.

Thank you,
Giuseppe

3

I checked your website, and I se the issue: your website has been hacked.

The “Welcome to nginx!” page resembles the page you’d see if you just installed the NGINX web server software and are seeing the default page. But that doesn’t make sense on our hosting, because that’s not a page you would see with us.

A quick look at your website code showed the issue. The index.php file in your htdocs folder does not look like a regular WordPress file at all. There is a lot of obfuscated code in there, code that has been deliberately garbled to make it hard to read and understand. That’s a classic sign of malware trying to hide its identity.

I wrote some steps for another case last week about another WordPress site that got infected. I recommend that you follow the same steps: