www.yahgodz.com (Andromeda http botnet hosted by dataclub.biz)

Resolved www.yahgodz.com to 46.183.217.148

Server:  www.yahgodz.com
Gate file:  /http/image.php

Additional domains:
bighecks.net/http/image.php (Missing gate file, hosted at worldstream.nl 217.23.4.155)
sonic4us.ru/http/image.php (Pointed at 127.0.0.1)
imageshells.com/admin/image.php (Missing gate file, hosted at worldstream.nl 217.23.4.107)

All of these are mystical’s domains, used for various nefarious purposes in the past. A quick google shows that he’s been loading onto this by sending linkbucks traffic to his blackhole.

Hosting infos: http://whois.domaintools.com/46.183.217.148

Categories: Uncategorized