All right, that’s good. Don’t worry about enabling SSL right now, worry about removing the malware first.
Back to the hacked site problem, did your web host ever get back to you when you contacted them? Also, did you upload Wordfence/Sucuri/iThemes and use it to scan your site?
I don’t like Sucuri’s external scanner, but here the results if you’re interested. https://sitecheck.sucuri.net/results/www.watchonline.red
Click to expand…
after a install and scanned with Wordfence, i found a weird script before close of head and all my theme in that domain had that script, download same, frees theme and compare, the frees one dont had that script, one fore sure . the script contain hxxxp://hcl.gr that also mark as malware site
and i had removed it now,
btw the hosting support report with not virus/malware detected after do a scan