Resolved florasister.com to 81.176.232.201
Server: florasister.com
Gate file: gigling.php
(backup hxxp://forandroid.tk/yandex.php (suspended))
Sites checked for configs (no droppers appear to be live):
hxxp://www.jcurve.com/templates/beez/params.php
hxxp://www.ivemon.es/templates/beez/params.php
hxxp://www.justicecameroun.com/templates/beez/params.php
hxxp://www.jackwalshcarpets.com/Joomla/templates/beez/params.php
hxxp://www.kocaelidho.org.tr/templates/beez/params.php
hxxp://www.moraditrade.com/en/templates/beez/params.php
hxxp://www.mm-nn.com/main/templates/beez/params.php
hxxp://www.jakmurowane.pl/templates/beez/params.php
Also attempted to connect to bigdealworked.com on port 9702
Hosting infos: http://whois.domaintools.com/81.176.232.201