Your server can be compromised. If you are lazy just drop it in a CDN like netlify
Check which JavaScript is loaded. There can be malicious js in a static site
Verify with Google Search Console
Check which JavaScript is loaded. There can be malicious js in a static site
Verify with Google Search Console