Malicious Redirection is common hack symptom that is seen in WordPress site. Sometimes hackers limit the redirection effect to certain Geographies, IPs & sometimes only via Google search (Google bots will think it is phishing). They do it generally to hide the effect from owner so that they can exploit the site over time. This video covers the steps you need to take to fix the donatello malware redirections which have been prevalent since last few weeks.