Website redirects to a strange site
Unwanted redirects can appear depending on the device, origin of the request, login status or a stored cookie. This may make it impossible to immediately reproduce a visitor's report on your own computer.
I reproduce the redirect under the reported conditions, identify the code triggering it, and check the installation for further tampering.
WordPress security and technical support
★★★★★ 5,0 on Google
- Response within 4 hours
- Restoration within 6 hours; half price if exceeded
- Cleanup €280 net at a fixed price
- Money-back guarantee
Report an emergency
I will get back to you within 4 hours.
Why the redirect only appears under certain conditions
Manipulated code can evaluate the conditions of a request. Several variants are therefore taken into account during the investigation.
Access via a search engine
The redirect may be tied to the referring page and appear only after a click from a search result.
Access with a mobile device
The triggering code can select mobile devices based on the browser identification or screen environment.
WordPress login status
Logged-in users may be served the regular website while visitors are redirected.
Cookie or session
A cookie can limit the redirect to a browser or session. Repeated tests in the same browser then produce different results.
How the redirect is removed
Reproduce the behavior
I test the reported request paths and document the redirect target, server response and affected pages.
Identify the source
Server rules, theme, plugins, other PHP files and relevant database entries are checked.
Clean up and check
I remove the triggering code, check the possible access route and repeat the tests for the conditions affected previously.
Services and prices
Malware scan
plus VAT · one-time
- Assessment of files, database and server configuration
- Analysis of available access logs
- Written report with documented findings
- Recommendations for the next technical steps
If you commission the cleanup afterwards, the 50 € will be fully credited.
Cleanup
plus VAT · fixed price, scan included
- Technical assessment included in the price
- Removal of the identified malicious code
- Restoration of normal operation
- Securing the identified access route and renewing relevant access credentials
- Basic hardening of the WordPress installation
- Technical report for the insurance company on request: €200 net
Ongoing support
per month, plus VAT.
- Controlled updates for WordPress, plugins and themes
- Regular checks for malicious code
- Continuous checks for newly reported vulnerabilities
- Cleanup included in the monthly fee during the support period
Further terms and conditions:
- All prices are plus 19 % VAT.
- For work on Saturdays, Sundays or public holidays, a one-time weekend flat rate of €100 is charged.
- The agreed response and restoration times apply Monday to Friday from 8 a.m. to 8 p.m.
- The restoration period begins as soon as all required access credentials are available.
- I will clarify the effort required for multiple websites in one installation, multisite systems and WooCommerce shops with ongoing orders before starting. Additional costs will be agreed before commissioning.
Frequently asked questions
I do not see the redirect myself. Could my site still be affected?
Yes. Test the reported request path in a private browser window and without being logged in to WordPress. A server-side check clarifies which conditions are defined in the code.
Is it enough to replace the .htaccess file?
That is sufficient if the redirect is triggered exclusively by this file. In addition, the database, theme, plugins and other PHP files should be checked for related tampering.
How is a Google warning removed?
After the complete cleanup, I request a re-review in Google Search Console. The timing and result of the approval are up to Google.
Have unwanted WordPress redirects checked and removed
During the free initial consultation, we clarify the symptoms observed, the available access credentials and the sensible next step. If the cause is likely to lie outside WordPress, you will receive an appropriate assessment.
You can reach me Monday to Friday from 8 a.m. to 8 p.m. Related topics: Google warns about your website · Unfamiliar subpages in the Google index · Remove WordPress malware · Remove WordPress virus
Clarify suspected malicious code
During the free initial consultation, you describe the irregularities observed and the available access credentials. I will explain whether the technical review for €50 net makes sense as a first step or whether the cleanup can begin directly.
- Technical assessment with written report€50
- Cleanup of a standard single installation€280
- Ongoing support per monthfrom €65
All prices excl. 19% VAT · Response within 4 hours, Mondays to Fridays from 8 a.m. to 8 p.m.