4thjuly.com hacked by Al-Jazeera

websearch | July 4,2002 | No_Doll_i

[No_Doll_i]

I was out looking for a nearby fireworks display to attend this evening and the first thing that came up in the search was the Great American 4th of July Fireworks in State College, PA. I thought great til I clicked the link and got Usama.

If I actually knew how to post a link correctly I would do it.. try this

http://4thjuly.com/

[No_Doll_i]

Just thought the local law enforcement types scanning the forum would like to know.

[Maedhros]

wtf?

[sigSEGV]

Looks like they forgot to patch their Apache.

[Cachelot]

Will probably turn up on one of the defaced-lists before long. And he had to get his shouts out, the silly b*gger :).

[sigSEGV]

Now this is weird. They are running the fixed version of Apache that doesn't have the vulnerability.

http://uptime.netcraft.com/up/graph?site=4thjuly.com%2F&submit=Examine

[McGruff]

Here's some info on the site.

Registrant:
Centre of the Web (4THJULY-DOM)
863 Benner Pike
State College, PA 16801
US

Domain Name: 4THJULY.COM

Administrative Contact:
Stitzinger, John (JS2053) billing@CENTREWEB.COM
Centre Of the Web
311 Science Park Rd
State College, PA 16803
US
(814)235-9592
Technical Contact:
Cieply, John (JC3738) john@CIEPLY.COM
Centre of the Web
914 Bayberry Drive
State College, PA 16801
814-238-1991

Record expires on 28-Jun-2003.
Record created on 27-Jun-1996.
Database last updated on 4-Jul-2002 13:06:00 EDT.

Domain servers in listed order:

NS0.CENTREWEB.COM 12.151.22.20
NS.OPUS1.COM 192.245.12.50

[No_Doll_i]

Thanks, I will give them a call.

[sigSEGV]

Alldas has em all. They don't seem to have this one up yet.

http://defaced.alldas.org/

[McGruff]

Here's some info on the host. They sound ok.

Centre Of the Web, Inc. Centre Of the Web, Inc. (C.O.W.) is a group of eight computer, telecommunications and design professionals with almost 200 years' worth of relevant experience among us. Our mission is to bring all of this expertise to every Internet project we tackle. At the moment we have designed and/or are hosting more than 25 websites with many more in the works.

Publishers Tech is a full partner in C.O.W. in the person of Bill Brickley, our owner and Production Manager. Rather than attempt to provide any more detail here, let's refer you directly to the C.O.W. website at: centreweb.com.

[humblegunner]

"We have no uptime data for 4thjuly.com at present, and cannot plot a graph. The host 4thjuly.com has been added to the list of sites that we may monitor. We will start monitoring 4thjuly.com in the next daily monitoring cycle. We will continue to monitor this host for a few days, to get enough values to plot a graph. After this time the host will not be monitored again unless it's requested again, or it is one of the most frequently requested hosts."

I don't get it.

[No_Doll_i]

Thanks, I know that the State College website is legit and has been there for some time.

I emailed some of the Fox News guys as well.

[sigSEGV]

Netcraft monitors uptimes for sites. If the site has never been queried before, they don't show any monitoring data. Tomorrow they won't show that any more and will have uptime data.

[fineright]

All I see at the site is a white screen with 4thjuly.com at the top left.

[No_Doll_i]

I just talked to the guys at State College, they are aware and are working on it.

[Cachelot]

Seems to be the Scalper. There's actually a worm on the loose running this, with DDoS capabilities built in.

Things could get real interesting for a while :).

[PJeffQ]

Attrition stopped?

What about antionline?