Resolved navega.pw to 22.214.171.124
Gate file: /b7891/b986/bnav123/mar/360/vid5852/order.php
This is on the same IP as the previously posted Athena irc botnet, and is one of three betabot botnets hosted on the server, with smalltoys and strike-file-hosting being the other two.
Hosting infos: http://whois.domaintools.com/126.96.36.199
Related md5s (Search on malwr.com to download the samples)
There is now a betabot version 1.5 botnet hosted at the path