read about this: http://1337z0ne.blogspot.nl/2012/06/how-to-deface-cgi-suspended-pages.html
182 websites lately defaced in this way…
Missed here: http://zulu.zscaler.com/submission/show/5a0ae69e02ff48d14a2b71061472cf27-1427295384
Detected by Sucuri’s: http://sitecheck.sucuri.net/results/rthemes.com
http://sucuri.net/malware/entry/MW:DEFACED:01
Hacked By r1q
Hosted on websitewelcome dot com.
See: http://linkeddata.informatik.hu-berlin.de/uridbg/index.php?url=http%3A%2F%2Frthemes.com%2Fcgi-sys%2Fsuspendedpage.cgi&useragentheader=&acceptheader=
malicious: http://killmalware.com/rthemes.com/#
See all the changes here: http://whois.domaintools.com/rthemes.com
-> http://toolbar.netcraft.com/site_report/?url=http%3A%2F%2Frthemes.com%2F
Malware Script Detector flags htxp://rthemes.com/cgi-sys/suspendedpage.cgi as XSS attack laden.
index.php hack center font hack ...please choose your destination....
referenced domain web rep status: https://www.mywot.com/en/scorecard/uploadmusic.org?utm_source=addon&utm_content=popup
pol