Have my SERP listings been hacked?

[emmyjo]

When you Google my site the organic search results look normal. The preview site images even display my actual site when you roll over the results. However, when you click a result you are directed to various Spam pages, not my website. How is this possible?

This only happens when you click through from search engines. If you type the URL directly in your browser, you are not redirected to a spam site.

the site: funeralhomeoptions.com

Have any of you seen or experienced this before?

[evolvingSEO]

Hi Emily

Just making sure you're all set. I can't seem to replicate the issue any more and I see you have the latest version of WordPress installed now.

If you need any further reference on securing WordPress this is a nice guide on their site - Hardening WordPress

The rest of the advise here looks great, thanks so much Majid and Nakul for helping out!

-Dan

[mhadaily]

That would be ok if you use these plugin as well :

http://wordpress.org/extend/plugins/sucuri-scanner/

http://wordpress.org/extend/plugins/gotmls/

http://wpantivirus.com/

[NakulGoyal]

Interesting link Majid. It does detect the malware on Emily's website.

http://sitecheck.sucuri.net/results/funeralhomeoptions.com

Clearly, it's the code injection we have been talking. I hope you are able to find the malicious code and remove it.

[NakulGoyal]

This is a code injection kind of spam that you have been hit with. I suggest you go ahead and upgrade your wordpress to the latest version as well as the plugins and themes.

The code injection is either placed within mySQL database in the wp_options table or inside your header files.

Check this article for an exact fix - http://www.mydigitallife.info/wordpress-hack-recover-and-fix-google-and-search-engine-or-no-cookie-traffic-redirected-to-your-needsinfo-anyresultsnet-golden-infonet-and-other-illegal-sites/

[mhadaily]

It could be your site is hacked and malware added on your site code. I had the similar attack before. It takes away your search engine traffic to another site (it doesn't redirect you if you are logged in so sometime people never notice it).

http://sitecheck.sucuri.net/results/funeralhomeoptions.com/

You should check index.php file or header.php and ... in your template folder and  .htaccess files as well.

[KeriMorgret]

I've heard of this before with Wordpress being hacked. I'm having one of our associates who is an expert at WP come over and comment and help walk you through a fix.