ryanlol already mentioned you could have ran a curl to check what's being delivered. But, you can also use the Web Archive and check every domain yourself with

ryanlol already mentioned you could have ran a curl to check what's being delivered. But, you can also use the Web Archive and check every domain yourself within their waterfall chart: http://web.archive.org/web/20150126072317/http://www.malaysiaairlines.com/my/en.html http://web.archive.org/web/20150126072317/http://www.malaysi... Looks like a bunch of static assets delivered by: fonts.googleapis.com, fonts.gstatic.com, pbs.twimg.com, and www.youtube.com. Looks similar to what I saw post-defacement/pre-fix.