What Is XCafe.com?

XCafe (xcafe.com) is a porn tube site. As of April 2023, the site xcafe.com gets an estimated 1.1 million monthly views according to SimilarWeb. The Wayback Machine estimates xcafe.com was founded on December 27, 1996. The Internet Archive has saved the domain xcafe.com 684 times between December 27, 1996 and May 10, 2023.

Links and Profiles

Website: https://xcafe.com/

Is XCafe.com Safe?

I ran malware tests to find out if xcafe.com is safe and legit. Here are the results:

I checked the site xcafe.com on the online malware scanner Sucuri and it returned with no issues. You can see the same here: https://sitecheck.sucuri.net/results/xcafe.com

Sucuri says the site xcafe.com doesn’t have malware and is a low security risk. However, it did run into a 403 Forbidden site issue when it tried to scan the following URLs:

  • https://xcafe.com/js/KernelTeamVideoSharingSystem.js?v=5.5.1
  • https://xcafe.com/js/exoSubId.min.js
  • https://xcafe.com/js/html5shiv.min.js
  • https://xcafe.com/js/init.min.js
  • https://xcafe.com/js/jquery.1.11.0.min.js
  • https://xcafe.com/js/masonry.min.js

Some hardening improvements can be made:

  • Missing security header for ClickJacking Protection. Alternatively, you can use Content-Security-Policy: frame-ancestors ‘none’. Affected pages:
    https://xcafe.com/404javascript.js
    https://xcafe.com/js/KernelTeamVideoSharingSystem.js?v=5.5.1
    https://xcafe.com/js/exoSubId.min.js
    https://xcafe.com/js/html5shiv.min.js
    https://xcafe.com/js/init.min.js
    https://xcafe.com/js/jquery.1.11.0.min.js
    https://xcafe.com/js/masonry.min.js
  • Missing security header to prevent Content Type sniffing.
  • Missing Strict-Transport-Security security header.
  • Missing Content-Security-Policy directive. We recommend to add the following CSP directives (you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src

However, these hardening improvements don’t impact the Sucuri grade.

To check this further I ran a parasite scan with Unmask Parasites on the site xcafe.com and it says the page is clean. You can see the same here: https://unmask.sucuri.net/security-report/?page=xcafe.com

To confirm that the site is clean, I also checked the site xcafe.com on VirusTotal and it says the domain is not malicious. You can see the same here: https://www.virustotal.com/gui/domain/xcafe.com

In conclusion, the site xcafe.com doesn’t have malware and is a low security risk according to Sucuri. Unmask Parasites says the site xcafe.com is clean of parasites. And VirusTotal and Sucuri say the domain xcafe.com isn’t flagged as malicious or blacklisted. Overall, the site xcafe.com is very safe.

References

1. SimilarWeb – xcafe.com

2. Wayback Machine – xcafe.com