os

Netcraft:    www.gcorona.com is running Microsoft-IIS/4.0 on NT4 or Windows 98
   
NMAP: Remote OS guesses: Windows NT4 / Win95 / Win98, Windows NT 4 SP3, Microsoft NT 4.0 Server SP5 + 2047 Hotfixes
www.gcorona.com: Server: Microsoft-IIS/4.0
 
mirror taken by: munge    
mirror taken on Thu Oct  5 04:24:51 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.367 ms  0.244 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  1.25 ms  1.127 ms
 3  143.ATM3-0.XR1.LAX2.ALTER.NET (146.188.249.130)  22.092 ms  11.215 ms
 4  295.at-1-0-0.XR1.LAX9.ALTER.NET (152.63.112.78)  14.002 ms  13.973 ms
 5  191.ATM7-0.BR1.LAX9.ALTER.NET (152.63.113.13)  11.901 ms  14.385 ms
 6  137.39.23.214 (137.39.23.214)  12.065 ms  12.397 ms
 7  bordercore4.Washington.cw.net (166.48.42.1)  81.338 ms  81.412 ms
 8  telefonica-de-espana.Washington.cw.net (166.48.43.246)  194.695 ms  187.064 ms
 9  194.69.226.58 (194.69.226.58)  207.052 ms  205.798 ms
10  194.69.235.10 (194.69.235.10)  212.728 ms  210.547 ms
11  194.179.29.29 (194.179.29.29)  239.775 ms  240.083 ms
12  * router11c.ncsa.es (194.179.50.11)  238.678 ms
13  iprouter50-5.ncsa.es (194.179.50.5)  239.823 ms *
14  gcorona.es (195.77.225.31)  248.65 ms *
 
Internic: Grupo Corona Espana, S.A. (GCORONA-DOM)
Sitename: Grupo Corona Espana, S.A.
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: Pimpshiz
remote os: NT
remote os: Microsoft NT 4.0 Server SP5 + 2047 Hotfixes
remote server: Microsoft-IIS/4.0
Thu Oct  5 04:28:05 MDT 2000
mirror number:    7949
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
llor@NCSA.ES notified
 
[00.10.05] NT [Pimpshiz]            <a href="2000/10/05/www.gcorona.com/">Grupo Corona Espana, S.A.</a> (<a href="http://www.gcorona.com/">www.gcorona.com</a>)