Yes, the site is http://www.nicholsenvironmental.com/.
We had a third party contact us that our site was linking to a http://www.expert-lender.com/ through a hidden link on our site which was http://www.nicholsenvironmental.com/wp-admin/includes/attachment/accessory/carinsurancecompanies.html.
If you go to this link, there is no page, it just redirects to http://www.expert-lender.com/. I've never been able to find where the redirect is written so I removed all folders regarding the site and creating a new database hoping the link would be in there somewhere but no success.
Beyond the database, the theme and supporting files like htaccess, where else can a redirect be hidden?