Author Topic: SEO malware on this game developer website?  (Read 1640 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
SEO malware on this game developer website?
« on: June 29, 2017, 07:03:59 PM »
Sucuri reports SEO spam on this website of Daybreak Games, a developer of such games as Planetside 2, which me and my friends have thought to play. The Sucuri's info on the entry seems to indicate that the said SEo spam is apparently only something injected to decieve search engines, or could this be false alarm because of some element on site's coding?

https://sitecheck.sucuri.net/results/daybreakgames.com

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: SEO malware on this game developer website?
« Reply #1 on: June 29, 2017, 11:02:05 PM »
Yes, there is potentially suspicious files there: wXw.esrb.org/confirm/soe-confirmation.jsp
Severity:   Potentially Suspicious
Reason:   Detected hidden potentially suspicious instructions
Details:   Detected hidden CSS declaration
Offset:   1123 Robo because it doest't look like a URL -> https://urlscan.io/result/10695815-cb40-4730-86cd-f2fae74fdbbd/dom/
and https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=daybreakgames.com&ref_sel=GSP2&ua_sel=ff&fs=1
Retirable code: http://retire.insecurity.today/#!/scan/59168242e18d8588a04ff8a1ab75b4ff2e5190a3e31b753539a769a497a5300a
Quote
<a href="hxtps://www.esrb.org/confirm/soe-confirmation.jsp" class="esrb" target="_blank"><img alt="ESRB Privacy" src="htxps://assets-cdn.daybreakgames.com/uploads/dcsclient/000/000/027/304.gif?v=0.0" border="0"></a> 
large traffic passing...
Why they have to stress their privacy policy in the code here: http://www.domxssscanner.com/scan?url=https%3A%2F%2Fwww.esrb.org%2Fconfirm%2Fsoe-confirmation.jsp (Game privacy policy influenced - nintendo, World of Warcraft etc. related).

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: June 29, 2017, 11:07:11 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: SEO malware on this game developer website?
« Reply #2 on: June 30, 2017, 03:28:22 AM »
According to quick Googling esrb.org seems to be a website focused on measuring statistics on different video game content provider sites.