os

Netcraft:    www.surveyheaven.com is running Microsoft-IIS/4.0 on NT4 or Windows 98
   
NMAP: Remote OS guesses: Windows NT4 / Win95 / Win98, Windows NT 4 SP3, Microsoft NT 4.0 Server SP5 + 2047 Hotfixes
www.surveyheaven.com: Server: Microsoft-IIS/4.0
 
mirror taken by: jericho  
mirror taken on Fri Sep 22 17:14:55 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.324 ms  0.277 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  2.891 ms  4.808 ms
 3  143.ATM2-0.XR2.LAX2.ALTER.NET (146.188.249.126)  16.186 ms  15.506 ms
 4  194.at-1-1-0.TR2.LAX9.ALTER.NET (152.63.112.158)  16.631 ms  13.006 ms
 5  131.at-5-0-0.TR2.ATL5.ALTER.NET (152.63.0.205)  79.346 ms  87.955 ms
 6  196.ATM6-0.XR2.ATL1.ALTER.NET (152.63.81.33)  84.634 ms  93.184 ms
 7  194.ATM5-0-0.HR1.ATL1.ALTER.NET (146.188.232.13)  86.953 ms  105.163 ms
 8  109.Hssi4-0.GW1.TPA1.ALTER.NET (137.39.75.189)  113.457 ms  108.779 ms
 9  advantagenet1-gw.customer.ALTER.NET (157.130.90.58)  111.846 ms  100.62 ms
10  63.102.11.61 (63.102.11.61)  122.851 ms  110.796 ms
 
Internic: Eric Moody (SURVEYHEAVEN-DOM)
Sitename: Survey Heaven
Potentially offensive content on defaced page.
defacer: WiNeGuM
remote os: NT
remote os: Windows NT
remote server: IIS/4.0
Fri Sep 22 17:17:57 MDT 2000
mirror number:    7729
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
Write2Eric@AOL.COM notified
domains@AD-VANTAGENET.COM notified
 
[00.09.22] NT [WiNeGuM]            <a href="2000/09/22/www.surveyheaven.com/">Survey Heaven</a> (<a href="http://www.surveyheaven.com/">www.surveyheaven.com</a>)