About the hacker site : Now appear in http.  bitsecuretransfer.com but in the opened site is a test by apache.
Before in http was bitsecuretransfer.com and in opened site was :The bitcoin fundation.
Probably the hacker was blocked now.I hope so.