See: http://killmalware.com/usurfer.com/#
htxp://beacon-4.newrelic.com/1/41b3fabaf8?a=10889896&pl=1413645154014&v=460.9fd672a&to=MwYBZxFVDxdRV0VQXwpMNkEKG09OQFxB&be=380&fe=12581&dc=2031&f=%5B%5D&perf=%7B%22timing%22:%7B%22of%22:1413645154014,%22n%22:0,%22u%22:27,%22ue%22:38,%22dl%22:26,%22di%22:2205,%22ds%22:2341,%22de%22:2417,%22dc%22:12947,%22l%22:12957,%22le%22:12999,%22r%22:5,%22re%22:5,%22f%22:5,%22dn%22:5,%22dne%22:5,%22c%22:5,%22ce …111 symbols skipped is blocked by an extension in my google chrome browser.
As the URL in the code clearly says, this is code for the New Relic performance monitor. It gets inserted automatically by a PHP/Apache module as long as it’s active on your server, this coming from the webhost
List of blacklisted external links: 2
htxp://2.bp.blogspot.com/-8l5smwxz7cs/tpxcvbfvooi/aaaaaaaace0/dewqisswjxc/s1600/2.jpg
htxp://2.bp.blogspot.com/_eec7gkv6jma/tmqdoztehhi/aaaaaaaac-8/vaaqurxxq4a/s320/ac130.jpg
List of referenced blacklisted domains/hosts: 1
-2.bp.blogspot.com
ISSUE DETECTED DEFINITION INFECTED URL
Defacement MW:DEFACED:01 htxp://usurfer.com
Defacement MW:DEFACED:01 htxp://usurfer.com/404javascript.js
Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01
2 warnings at asafaweb: https://asafaweb.com/Scan?Url=usurfer.com
Security Headers: https://www.uploady.com/download/lox7Hqw3Apq/z2MQcq5LSI0o2Bre
Re: http://www.dnsinspect.com/usurfer.com/1423672415
Suspicion of Defacement
meta name=“keywords” content=“hacked by trojan tn”> <script sr…
Also link to safa.ps (part of hack) negative web rep: https://www.mywot.com/en/scorecard/safa.ps?utm_source=addon&utm_content=popup
polonus (volunteer website security analyst and website error-hunter)