We know 15k websites are infected. how do we tell them?
We've identified 15,579 websites that are currently infected with malicious JavaScript and between them, we conservatively estimate that they receive more than 135 million visits every month. We know they're infected, and we have the evidence to back that up, but there's a problem: how on
Quick read
A Report URI blog post describing identification of 15,579 websites infected with malicious JavaScript and the difficulty of notifying their owners. It asks for help and coordination from CERTs, hosters, and the security community to turn threat intelligence into actionable notifications.
- Lists types of attacks found (skimmers, click‑fix, device exploits, redirects)
- Explains common infection vectors (direct compromise, supply chain, XSS, DeadTag)
- Offers to share intelligence with NCSC/CERTs and commercial partners
Reactions
No reactions yet. Record a short about this link and it shows up here, in Reels and in the community feed.
Is scotthelme.co.uk your site? Sign in to verify it and get a Verified badge, full stats and a link-back badge.
What we found on this site
- Built with
- Ghost
- Served through
- Cloudflare
- Home page answered in
- 118 ms
- Trackers
- None found
- Ads
- None found
- RSS feed
- Yes
- AI crawlers
- Lets them in
- Set up for phones
- Yes
- Real-visitor speed
- Passes Core Web Vitals
- Popularity
- Top 200,000 domain (Cloudflare)
- Google safety check
- No threats found
- Domain registered
- 2012
- Domain renews
- July 2027
Checked November 8, 2026 from the site’s own code and public records. See how the rest of the web compares in the NexURLs Internet Report.
Sites like We know 15k websites are infected. how do we tell them?
- VirusTotalvirustotal.com
- Observations from Running stealmybitcoinpavursec.com
A first-person account of an experiment that deployed a vulnerable PHP site (stealmybitcoin.com) to test whether the...
- urlscan.iourlscan.io
- Security Headerssecurityheaders.com
- Have I Been Pwnedhaveibeenpwned.com
Have I Been Pwned is a service to check if your email has been involved in data breaches. Users can monitor their...
- 35 Useful Websites: paywalls, saving pages, and moretwelveft.io
More Tech & AI finds
- Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyondredox-os.org
- Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containersblog.nspawn.org
- BUGATTI BUILT A TV THAT UNFOLDS IN 45 SECONDS.youtube.com
- Marketur MCP WordPress Plugin for ChatGPT and Claudenexurls.com/@nexurls
- GhostMap: The Android flaw that crashes your phone before you open the appbitdefender.com
- Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Headerlkoskela.fi
Feeling lucky? Try the random website generator.
Where people went next
Nobody has added a next stop yet. Be the first.