1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Need help - My brother's company website redirects to a parking domain or CPA offer

Discussion in 'Black Hat SEO' started by Bargain Boss, May 5, 2016.

  1. Bargain Boss

    Bargain Boss Newbie

    Joined:
    Apr 6, 2016
    Messages:
    48
    Likes Received:
    16
    I need help, guys. Since early April this year, my brother's company website would randomly redirect to a parking domain or a CPA offer when I click on the URL on Google based on his main keyword (it's a local food product search term).

    The ratio of being taken to his website vs being taken to a parking domain or CPA offer is around 9:1. His ranking steadily dropped from number 3 to 32 on local Google search in April. His website used to be in the top 5 ranking since it was established in 2010.

    His website codes, WP theme and plugins are clean when I checked them. Does anyone know what might cause this redirection problem and how to resolve it?
     
  2. Heisenberg

    Heisenberg Jr. VIP Jr. VIP

    Joined:
    Sep 11, 2014
    Messages:
    720
    Likes Received:
    375
    Occupation:
    Freelancer
    Location:
    Croatia
    1. Is your DNS setup correctly?
    2. Are you sure website wasn't hacked?
     
  3. Bargain Boss

    Bargain Boss Newbie

    Joined:
    Apr 6, 2016
    Messages:
    48
    Likes Received:
    16
    The DNS is set up properly.

    I didn't find anything suspicious in the codes in WP editor and wp-config.php. I even ran the complete backup files against VirusTotal and nothing came up too. My brother subscribes to VaultPress Premium since the start of his website back in 2010. He restored his website more than 10 times last month to the statuses in March 2016 but the redirection still persists. This redirection issue only occurred since early April. Everything was good before that.
     
  4. arpitagarwal82

    arpitagarwal82 Power Member

    Joined:
    Feb 20, 2008
    Messages:
    731
    Likes Received:
    471
    Location:
    Localhost
    PM me the website URL and let me check.
     
  5. TRUE Media Partner

    TRUE Media Partner Registered Member

    Joined:
    Dec 29, 2013
    Messages:
    72
    Likes Received:
    10
    Home Page:
    Check .htaccess.
    Then try to scan your site folders with AI-Bolit (free site scanner).
     
    • Thanks Thanks x 1
  6. Bargain Boss

    Bargain Boss Newbie

    Joined:
    Apr 6, 2016
    Messages:
    48
    Likes Received:
    16
    Thanks for the advice. I'll try that software.
     
  7. Bleght

    Bleght BANNED BANNED

    Joined:
    Feb 18, 2016
    Messages:
    548
    Likes Received:
    171
    No way the site is clean, dude. It's very likely that it was hacked, you just can't find the malicious code. It's not really a virus, it's just a redirect script hidden somewhere, so don't rely on virus scanner only. Getting an experienced sys admin will probably solve the problem pretty quickly if you have the money to pay for one. This is probably the reason the site dropped. The second you saw such a problematic redirect, you should have acted because this means someone has access to your site and is abusing it, making money instead of your brother, hurting his business.
     
  8. Bargain Boss

    Bargain Boss Newbie

    Joined:
    Apr 6, 2016
    Messages:
    48
    Likes Received:
    16
    You're right about the malicious code, mate. I just saw it upon scanning with Sucuri. My brother contact his hosting provider a few times last month to check the problem for him but apparently they said everything "seemed fine" on their end. I checked my brother's website myself but couldn't find anything back then. I even asked my web design buddies for help. I'm just glad BHW is very helpful.
     
  9. Bargain Boss

    Bargain Boss Newbie

    Joined:
    Apr 6, 2016
    Messages:
    48
    Likes Received:
    16
    I read thread number 838039 (I can't post links yet.) Thank you, Asif WILSON Khan, for the suggestions on the website scanners.


    Here is what I just found using Sucuri Site Check.
    ipng-3232-66.html


    Found this code on 6 of the product category links on Quttera's scan:
    ipng-3232-68.html

    Both images are hosted on Image-Share.


    What do I do now, guys? Any suggestions?
     
  10. Bargain Boss

    Bargain Boss Newbie

    Joined:
    Apr 6, 2016
    Messages:
    48
    Likes Received:
    16
    Here's a quick update. After I told my brother about the scan results, he hired the services of a malware removal company last week. His website ranking moved up again. Now it is sitting at number 9 on Google when I checked it today. Hope it goes back up to the 3rd spot soon.