sus.botdocs

Security finding

Visitors from another network are sent to a different site

Security Error Severity: High

Part of the audit Unexpected changes. Finding id: security.redirectForSomeVisitors.

What it costs you

Part of your visitors is sent to a site you do not control. This is a common sign of a break-in, and search engines and browsers can mark the site as unsafe.

What to do

Check the server configuration, .htaccess, CMS plugins and the CDN for redirect rules that depend on country or IP address. If you did not add them, treat the site as hacked.

What it checks

  • Redirect seen only from some networks

How to fix it

Find and remove the conditional redirect

  1. Search the server and CMS configuration for redirects to [other host].
  2. Look for rules that test the visitor's country, IP address or referrer, in .htaccess, the server configuration, plugins and the CDN's rules.
  3. If you find one you did not add, restore the site from a clean backup, change all passwords and update the CMS and plugins.

How to check: Run the network check again: both networks end on the same site.