Why Your Website is Redirecting to Casino Sites (and How to Fix It)

What is a Cloaked Redirect?

This is a sophisticated technique where the malicious code checks if the visitor is a search engine (like Googlebot) or a real human. It might show Google the "real" site but redirect humans to a casino site—or vice-versa. This is why you might not see the hack yourself, but your customers do.

Where the Malware Hides

It's rarely just one file. It's usually spread across your `.htaccess` file, your theme's `header.php`, and often deep inside the `wp_options` table in your database. Automated plugins often miss these database-level infections.

How to Fix It

Simply deleting a file won't work because there is usually a cron job (scheduled task) in your server that re-infects the file every hour. You need to kill the parent process and harden the directory permissions.