uberchat.no-ip.biz (Andromeda http botnet hosted by Romania Voxility S.r.l.)

Resolved uberchat.no-ip.biz to 37.221.160.124

Yet another cracked andromeda. Skids don’t even bother to get a real domain for it.

Server:   uberchat.no-ip.biz
Gate file:  /chat/image.php

Clicking on adf.ly links, someone’s clearly trying to make some big bucks.

public void adfly()
    {
      this.WebBrowser1.Navigate("http://adf.ly/FHZcZ");
    }

Hosting infos: http://whois.domaintools.com/37.221.160.124

Categories: Uncategorized