Ask Why can’t I really reproduce random domain redirects?

[Brajet]

One of my friends noticed that my website redirects him to sketchy websites randomly. (It happened to me only once a week ago, i though I misslicked). Today we tried to reproduce it white my flatmates. (Multiple devices, multiple network, multiple browser) We couldnt. Only issue was that on mobile data some of us was getting 403 Forbiddent access (or something like that).

Things I did:


Ran Wordfence Full Scan
• ⁠Ran Hostingers Malware Scan
• ⁠Virustotal didnt find anything 0/90
• ⁠Checked my .htaccess, its clean
• ⁠Checked for .php files in upload folder
• ⁠Only have one Admin user (thats me)
• ⁠Only have well known plugins (Elementor, Essential Addons for Elementor, Google analytics by monderinsight, LiteSpeedCach, Ultimate addons for elementor lite, wordfence, WpForms, Yoast SEO) And I use the astra theme.
• ⁠Talked with hosting provider (hostinger), they couldnt repdoruce the problem.
• ⁠EVERYTHING is updated to the newest version


Im writing this post ecause at this point Im out of ideas.

Some things I found:

Ran broken link checker, it found a lot of broken links with unknown error.
• ⁠Securi was unable to scan my website (Timed out), but told me its not blacklisted.
• ⁠Malwarebytes blocked the websites url for some reason
• ⁠Im redirecting two pages using redirect in .htacces (I wrote it)


• ⁠Im using Hostinger
• ⁠Im using CloudFlare

 

[Anthony Joshua]

From what I've noticed, random domain redirects can be tricky because they don't follow one fixed pattern. Many times, they depend on cookies, sessions, or even user behavior that triggers the redirect only once. That's why when you test it again, nothing happens. Also, bad scripts or compromised plugins can create these random effects without showing clear signs. It takes patience and careful checking to trace where it's coming from.

 

[Felix😎]

This kind of issue can be super frustrating, especially when you can't reproduce it easily. Since Malwarebytes blocked your site, it might be worth digging deeper into why. Sometimes attackers inject malicious scripts that don't trigger every time, especially for certain devices or networks. I'd also double-check your Cloudflare settings and any custom rules. If nothing works, maybe try a fresh WordPress install and restore your content carefully—it's a safe way to rule out hidden problems.