Websites that leave their directory indexes public are often poorly maintained. This makes them prime targets for hosting malware or phishing scripts.
The command hot hadn't been a search term. It had been a filter. He had asked the system to find the hottest thing in the vicinity. view indexframe shtml hot