Fortunately not in modeeworld, but for three other commerce websites that I have, I found suspicious .php and .htaccess files that were apparently redirecting...