os

new fingerprint mailed to attrition_sigs@insecure.org for nmap upgrade
Netcraft:    www.csfa.org is running Apache/1.3.12 (Unix) PHP/4.0.2 mod_ssl/2.6.6
   OpenSSL/0.9.6-beta1
NMAP: Aggressive OS guesses: Linux 2.3.47 - 2.3.99-pre2 x86 (95%), Linux 2.3.49 x86 (95%), Linux Kernel 2.4.0-test5 (92%)
www.csfa.org: Server: Apache/1.3.12 (Unix) PHP/4.0.2 mod_ssl/2.6.6 OpenSSL/0.9.6-beta1
 
mirror taken by: null     
mirror taken on Thu Sep 14 19:43:11 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.373 ms  0.265 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  36.34 ms  25.493 ms
 3  143.ATM2-0.XR1.LAX2.ALTER.NET (146.188.249.122)  42.548 ms  23.836 ms
 4  195.at-2-1-0.TR1.LAX9.ALTER.NET (152.63.112.150)  44.333 ms  30.944 ms
 5  131.at-6-0-0.TR1.CHI2.ALTER.NET (152.63.1.41)  90.254 ms  73.256 ms
 6  197.ATM7-0.XR1.CHI4.ALTER.NET (152.63.65.53)  76.588 ms  87.373 ms
 7  195.ATM10-0-0.GW3.MSP1.ALTER.NET (146.188.209.193)  99.207 ms  117.968 ms
 8  onvoy-gw.customer.alter.net (157.130.115.110)  135.161 ms  117.181 ms
 9  Core-M20-1-at0-0-0-761.PLY.MR.Net (137.192.7.54)  108.524 ms  139.125 ms
10  Border1-A2-0-721.KTO.MR.Net (137.192.6.210)  123.595 ms  143.643 ms
11  InternetConn-mrnet.kto.mr.net (206.8.88.253)  195.88 ms  172.349 ms
12  www.csfa.org (209.114.1.122)  116.913 ms  139.437 ms
 
Internic: Citizen's Scholarship Foundation (CSFA5-DOM)
Sitename: Citizen's Scholarship Foundation
Potentially offensive content on defaced page.
defacer: Hacker
remote os: Li
remote os: Linux 2.3.47 - 2.3.99-pre2 x86
remote server: Apache/1.3.12
Thu Sep 14 19:45:21 MDT 2000
mirror number:    7604
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
snesburg@CSFA.ORG notified
longshot@IC.MANKATO.MN.US notified
 
[00.09.14] Li [Hacker]            <a href="2000/09/14/www.csfa.org/">Citizen's Scholarship Foundation</a> (<a href="http://www.csfa.org/">www.csfa.org</a>)