Zone-H is an independent observatory of server-side cyber crimes. It is a privately owned website that archives defaced websites based on defacers’ self-report. Typically, once a hacker defaces a website, it notifies Zone-H about the details of the defacement incident through the Zone-h webpage. The reported information includes the URL of the defaced website, the reason for defacements (e.g., for fun, for political reasons, to be a best defacer, etc.), the hacking method (e.g., SQL injection, known vulnerability, etc.), the type of victim’s operating systems (e.g., Linux, Solaris, Win XP, MacOS, etc.), and the notifier identity. The reasons for defacements, mode of hacking, and the operating systems types are chosen by a notifying hacker unit from drop-down lists that were pre-defined by Zone-H.org. The Zone-H’s web server automatically captures the defaced webpage at the time of report. The captured webpage is manually verified by Zoneh’s staff to rule out fake reports.