and haven’t been able to locate the code generating the web page redirect, check within your WordPress text widgets, and plugins or theme customization control panels for the malicious text.
You may need sharp eyes to find this one.
Because this code is of the “legitimate use” variety, it is unlikely that any of your off-the-shelf malware checking plugins or server monitors will recognize this code as malicious.
The numbers starting with 104, 116, 116, etc, decodes to
hotopponents .site / site .js ? wtr = 2, et al. gibberish.