navega.pw (Betabot http botnet hosted by OVH.net)

Resolved navega.pw to 198.245.51.109

Server:  navega.pw
Gate file: /b7891/b986/bnav123/mar/360/vid5852/order.php

This is on the same IP as the previously posted Athena irc botnet, and is one of three betabot botnets hosted on the server, with smalltoys and strike-file-hosting being the other two.

Hosting infos: http://whois.domaintools.com/198.245.51.109

Related md5s (Search on malwr.com to download the samples)
betabot: a422f5aabc160f5a8dbde033ea9e6d0b

Edit:
There is now a betabot version 1.5 botnet hosted at the path
hxxp://navega.pw/b7891/b986/vid5852/mar/360/bnav123/order.php