Limited-Time Service for Emergency Inspection of Corporate Website Tampering Risks

Broadband Security Inc. (Headquarters: Shinjuku-ku, Tokyo; President and Representative Director: Takashi Takizawa; hereinafter BBSec), which provides services specialized in security such as IT measures against information leaks, offers the "External Script URL Monitoring Service" that visualizes the communication destination domains of external scripts embedded in corporate websites and detects malicious domain infiltration and domain hijacking risks at an early stage.

In light of the recent successive occurrences of website tampering incidents attributed to external scripts since May 2026, we are pleased to announce that, in addition to our continuous monitoring service, we will offer a limited-time "Website External Script Emergency Inspection Service" that allows one-time confirmation of website security.

[Background]

Since the end of May 2026, incidents of suspicious authentication screens being displayed via external scripts (polyfill.io) have been reported on the websites of multiple major companies.

In these incidents, it has been confirmed that scripts loaded from external sources were tampered with by third parties, resulting in malicious authentication screens or unauthorized content being displayed to visitors.

While external scripts are a convenient mechanism, once introduced, they often remain even after becoming unnecessary. Without proper management, they can lead to risks such as website tampering, information leaks, and being used as a stepping stone for phishing attacks.

[Service Overview]

BBSec's "External Script URL Monitoring Service" automatically collects and analyzes third-party domains actually loaded by customers' websites, continuously monitoring potential security risks.

Main detection items:

- Guidance to malicious sites using redirects (tracking multi-step communication)
- Detection of unauthorized JavaScript aimed at website tampering or web skimming
- Detection of newly appearing domains and risk changes
- Early detection of domain expiration (drop catch countermeasures)

In response to the recent increase in incidents caused by external scripts, we are offering a one-time diagnostic menu "Website External Script Emergency Inspection Service" for a limited time, which is normally provided under an annual contract.

Service name: Website External Script Emergency Inspection Service

Price: 200,000 yen per domain (excluding tax)

Application deadline: Orders placed by Thursday, June 25, 2026

Contact for emergency inspection service:

https://www.gomez.co.jp/contact/contact_form_260625.html

Given that damage has been reported on multiple websites, including major companies, it is important to check the safety of your own website early and take necessary measures.

Through this service, BBSec supports the visualization and countermeasures of supply chain risks inherent in corporate websites, contributing to safe web service operations.

[Related Webinar Information]

Seminar: "Monitoring and Countermeasures for External Tags and Third-Party Scripts" – Visualizing Invisible Threats on Websites

Date and time: Wednesday, June 10, 2026, 14:00-14:30

Speaker: Broadband Security Inc., Gomes Consulting Division Head, Masato Morisawa

Venue/Cost: Online / Free

Application form:

https://cr.bbsec.co.jp/gomez_20260610

[About BBSec]

BBSec is a total security service provider founded in 2000. It offers a full lineup of services, from visualization and diagnosis of current conditions to incident response and 24/365 operation. Leveraging high technical capabilities, extensive experience, and broad information gathering, BBSec views "attacks targeting supply chains," "attacks targeting social infrastructure," and "security in the AI era" as social issues to be solved, and aims to realize the vision of creating a "convenient and safe network society" by protecting more customers from malicious attackers.