Welcome to the Q&A Forum

I'd start with the good old Google Keyword Planner, start with seed keyword phrases, and go from there. For hyper topical keywords you can build content around, use Google Trends to see what's hot for some timely content ideas.

I don't know of any rule that says the content has to be close to or resemble the original content. I've used both url to url and many to one url methods of redirecting pages, depending on what I'm trying to accomplish. If you CAN go url to url, I would, simply from a usability standpoint. If I am clicking on a link in the SERPS for "old link", I am expecting the content on "new link" to at resemble the content I'm expecting. If not, you will get higher bounce rates etc. I'd go for url to url for this reason alone.

In the circumstances where you can't do this, such as limitations WIX has on url to url 301 redirects, then you would go to the main page or section page. Remember, the intent of the redirect is to tell Google the content moved and that it has a new home. Again, no rule that I can cite on this, but we all know Google likes what people like.

Koki,

I'm very curious where you might have gotten the idea of doing it in stages?

Kristen brings up an excellent point - not doing all the 301's at once can confuse search engines. Along the same lines of timing, the sooner you get the redirects in place and get rid of the old data, the sooner you benefit from updated links and "juice" from the links.

Here a good post from a few years back that brings up a good warning about multiple 301's - https://moz.com/community/q/2-stage-301-redirects

Good luck.

Given what you've shared you either have a target on your back or you have some lingering issues from a past infection. I've seen this before and its a pain is the $%& to deal with, but not impossible.

For preventative measures for anyone with a WP site, I recommend the following:

• Use Wordfence - paid version if you can (minimal cost). Monitor the notifications, use country blocking that you are comfortable with (I disable China, Ukraine, N Korea, and Russia on most sites since most are local sites in the U.S.), and enable front end scanning
• Remove admin account and any other "easy" usernames
• Give all WP users strong passwords
• Use strong FTP passwords
• Don't install any plugins you don't need
• Update everything often! This is the best way to avoid problems.
• Pay attention to the theme you use and they are NOT all created equal. It's not uncommon for some themes to have known or unknown exploits in them, so be careful of the theme you use. Make sure it has good reviews and excellent support. If not, find a different theme.

In your case, I'd do the following:

• Sign up for Sucuri for a year. They will audit your site within 24 hours and will clean any malicious files on the site. Hands down the best service for cleaning WordPress sites. $199.
• Remove un-needed WP users, change all WP passwords, remove Admin or other easy usernames and transfer posts/pages to another user
• Remove un-needed FTP users, change all FTP passwords
• Audit your plugins and get rid of all you don't need
• Keep your plugins, themes, and WP updated.

Hope this helps. It's easier than it sounds when your get a system going.

Joey