it’s the first time i got problem with an hoster downloading a txt file.
I’ve tried with htaccess, curl, etc still get a nice 404 or 302 error (with curl).
I moved php and txt files on another free hoster and no problem. I think it’s the www config. About malware the index2.html created during the setup process is detected by antivirus.
I guess a script included in the page but i deleted the page and didn’t checked the code.
The only scripts included in the default page are stuff like Bootstrap and jQuery, all loaded from major CDNs like Cloudflare. If your antivirus says the default page is harmful, then your antivirus is wrong.
I noticed the page are with ?z parameter, also blocked by malwarebytes. Too many redirections.
I tried at work and in family too see if it wasn’t on my side but same error.