How to Clean a WordPress Malware Redirect Hack ( Fake Plugin )

The following redirect hack, detailed in this article, has 4 main steps, starting with a Punycode domain ( .рф or xn--p1ai ). All domains are directed to this IP address 45.14.226.100 ( SpectraIP B.V. ).