os

Netcraft:    The site www.evergreat.com runs Microsoft-IIS/4.0 on NT4/Windows 98
   
NMAP: Remote operating system guess: Windows NT4 / Win95 / Win98
www.evergreat.com: Server: Microsoft-IIS/4.0
 
mirror taken by: munge    
mirror taken on Fri Dec 29 08:26:51 MST 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.348 ms  0.432 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  11.246 ms  15.706 ms
 3  143.ATM2-0.XR2.LAX2.ALTER.NET (146.188.249.126)  17.612 ms  25.947 ms
 4  194.ATM2-0.TR2.LAX2.ALTER.NET (146.188.248.130)  18.548 ms  19.999 ms
 5  111.at-6-0-0.TR2.DFW9.ALTER.NET (146.188.142.133)  55.495 ms  67.082 ms
 6  288.at-1-0-0.XR2.DFW9.ALTER.NET (152.63.98.45)  54.938 ms  57.139 ms
 7  184.ATM6-0.BR1.DFW9.ALTER.NET (152.63.98.129)  69.551 ms  57.954 ms
 8  137.39.23.222 (137.39.23.222)  47.36 ms  56.685 ms
 9  p4-4-0.r05.plalca01.us.bb.verio.net (129.250.2.201)  85.696 ms  64.996 ms
10  ge-3-0.a03.plalca01.us.ra.verio.net (129.250.29.35)  76.787 ms  62.127 ms
11  p4-0-0.a05.mtvwca01.us.ra.verio.net (129.250.122.70)  82.439 ms  78.559 ms
12  fa-11-1-0.a03.mtvwca01.us.ra.verio.net (129.250.122.197)  70.846 ms  70.198 ms
13  imo-west1-ptp128k-gw.mv.best.net (206.86.122.22)  66.623 ms  61.79 ms
14  206-14-132-9.ncal.verio.com (206.14.132.9)  73.133 ms  68.191 ms
 
Internic: Evergreat (EVERGREAT-DOM)
Sitename: Evergreat
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: VIRUSKREW
remote os: NT
remote os: NT4
remote server: Microsoft-IIS/4.0
Fri Dec 29 08:28:55 MST 2000
mirror number:    9845
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
vincent@CASEOUTLET.COM notified
 
[00.12.29] NT [VIRUSKREW]            <a href="2000/12/29/www.evergreat.com/">Evergreat</a> (<a href="http://www.evergreat.com/">www.evergreat.com</a>)