The hack redirects all my sites to another site
All are running WP 5.4.1 (latest) and I even have a site that barely runs any plugins, just a simple open-source theme with 3 common plugins - Contact Form 7, etc.
Thus, can I assume the attacker might be coming from A2 Hosting?
I moved one of my sites to a new host (InMotion Hosting) and left 2 running in A2 Hosting. I deleted another site. So, far both sites left in A2 hosting got hacked again (4th time). I did change cPanel password after 3rd hack. The InMotion site is safe. I did not delete any of my files or changed them. I just restored from old backup that I did at A2.