What Is Xcafe.com?
Xcafe (xcafe.com) is a porn tube site. As of December 2022, the site xcafe.com gets an estimated 1 million monthly views, according to SimilarWeb. The Wayback Machine estimates xcafe.com was founded on December 27, 1996.
Website: https://xcafe.com/
Is Xcafe.com Safe?
I conducted a series of malware tests to find out if Xcafe is safe and legit. Here are the results:
I installed the Malwarebytes Browser Guard on my Edge browser and was able to browse the site xcafe.com without the browser guard telling me that the site was compromised or malicious.
To check this further I ran malware scans on my computer with Malwarebytes and Spybot – Search & Destroy and both scans returned no malware detection. I also ran a system-wide full scan with Microsoft Defender.
To try to confirm that the site is clean, I also checked the site xcafe.com on an online malware scanner Sucuri and it returned a 403 Forbidden site issue. This means that the scan’s actions were forbidden by the server; however, the 403 was only for some pages on the site. The scan was able to complete relatively well. Subsequently, the scan gave the site a low security risk grade. You can see the same here: Sucuri scan for the site xcafe.com.
There are missing security headers:
Missing security header for ClickJacking Protection. Alternatively, you can use Content-Security-Policy: frame-ancestors ‘none’. Affected pages:
https://xcafe.com/404javascript.js
https://xcafe.com/js/KernelTeamVideoSharingSystem.js?v=5.5.1
https://xcafe.com/js/exoSubId.min.js
https://xcafe.com/js/html5shiv.min.js
https://xcafe.com/js/initsite.js?v=29
https://xcafe.com/js/jquery.1.11.0.min.js
https://xcafe.com/js/masonry.min.jsMissing security header to prevent Content Type sniffing.
Missing Strict-Transport-Security security header.
Missing Content-Security-Policy directive. We recommend to add the following CSP directives (you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src
However, these security headers don’t change the overall grade of the Sucuri scan.
Lastly, I ran the site xcafe.com through an online malware scan with VirusTotal and no security vendors flagged the domain as suspicious. You can see the same here: VirusTotal scan for the site xcafe.com.
In conclusion, there was no malware detected during the scan. Moreover, the site xcafe.com is not blacklisted by any security vendor. You can browse this site safely.