This http botnet is very big one
FAKE ANTIVIRUS wich infect machines connect to http to reports infections or download files
control panel here:
http://www.duffiduffid.ru/stat/
http://www.duffiduffid.ru/stat/stat3.php
Resolved : [duffiduffid.ru] To [82.210.157.9]
Resolved : [duffiduffid.ru] To [113.161.87.176]
Resolved : [duffiduffid.ru] To [71.217.16.11]
Resolved : [duffiduffid.ru] To [60.19.30.135]
Resolved : [duffiduffid.ru] To [87.126.200.246]
hosting infos:
http://whois.domaintools.com/87.126.200.246