Skip to main content

Why does my cpanel domain link just download a script?

Comments

2 comments

  • cPRex Jurassic Moderator

    Hey there!  This almost looks like PHP isn't working on your account properly.  As a test, can you create a file named test.php with this code:

    <?php
    
    // Show all information, defaults to INFO_ALL
    phpinfo();
    
    ?>

    and then try to access yourdomain.com/test.php.  If that file also downloads, there is an issue with PHP on your account and you will need to contact your host to have them fix that.

    0
  • rbairwell

    It appears your site has been breached by a piece of malware which grants the hacker full access to your site: I suggested deleting all files (and checking cron entries), restoring from a known good back up and then ensuring WordPress and all plugins are up to date. This page at https://hacked.codes/2022/december-2022-php-wordpress-malware-analysis/#removal has some more details of how to check.

    Have you recently installed any new WordPress plugins? (Especially one where you were "notified" via email to install regarding a CVE - if so, you were directed to a fake WordPress plugin site and download the malware).

    0

Please sign in to leave a comment.