Help, website hacked!

Hey guys

I found a lot clicks come out from my site:


I thought it was from the dooplay theme posted here months ago which was reported already, so I changed the theme, and the clicks still there.

I asked for help from hosting (Namecheap) service, they asked me to scan the hosting with the Virus Scanner of Cpanel, but nothing changed.

So i have to ask for help here.
Here are the plugins and themes I am using from Babiato:

theme:　Alchemist (with a lot plugins)
Plugins: Yoast SEO Premium, FS poster (All disabled to test, all the unknown clicks still the same)

(All other plugins are from WP official)

ThOSE clicks go to:
districtbaloneywhiskers.com
oppositehometowndrunken.com
plywoodenchant.com
galacticmenueasier.com
faithfulfacultativeladder.com
tightsaturdayi.com
visitsfunk.com
tentmess.com
wilfulpessimistic.com
dividedscientific.com
rookmemorizevoluntary.com
locationsreverenceaid.com
tilltucked.com
splittingpick.com

Please help!!

Thanks

Thanks for all the reply.
I tried wordfence and I found the malfare: monit.php under plugin folder. After I removed it and all other related files and data in MySQL, all the unusual clicks gone.
It's not the first time I found the malware in my sites, but never defeat it, hopefully this time wordfence works.