api.wifi-update.biz (Betabot http botnet hosted by oneandone.net)

Resolved api.wifi-update.biz to 87.106.241.22

Server:  api.wifi-update.biz
Gate file:  /cdn/img.php

Alternate domains:
api-radio-def.de
api.lul.pw
api.tba.pw

Domain info: wifi-update.biz

Domain Name:                                 WIFI-UPDATE.BIZ
Domain ID:                                   D58641421-BIZ
Sponsoring Registrar:                        BIZCN.COM, INC.
Sponsoring Registrar IANA ID:                471
Registrar URL (registration services):       www.bizcn.com
Domain Status:                               clientTransferProhibited
Registrant ID:                               ORGEH90335606834
Registrant Name:                             Erkki Hagstrom
Registrant Organization:                     ErkkiHagstrom
Registrant Address1:                         Gesterbyntie 51
Registrant City:                             HYVINKAA
Registrant State/Province:                   HYVINKAA
Registrant Postal Code:                      05460
Registrant Country:                          Finland
Registrant Country Code:                     FI
Registrant Phone Number:                     +86.506454350
Registrant Facsimile Number:                 +86.506454350
Registrant Email:                            info@wifi-update.biz
Administrative Contact ID:                   ORGEH90335607831
Administrative Contact Name:                 Erkki Hagstrom
Administrative Contact Organization:         Erkki Hagstrom
Administrative Contact Address1:             Gesterbyntie 51
Administrative Contact City:                 HYVINKAA
Administrative Contact State/Province:       HYVINKAA
Administrative Contact Postal Code:          05460
Administrative Contact Country:              Finland
Administrative Contact Country Code:         FI
Administrative Contact Phone Number:         +86.506454350
Administrative Contact Facsimile Number:     +86.506454350
Administrative Contact Email:                info@wifi-update.biz
Billing Contact ID:                          ORGEH90335609498
Billing Contact Name:                        Erkki Hagstrom
Billing Contact Organization:                Erkki Hagstrom
Billing Contact Address1:                    Gesterbyntie 51
Billing Contact City:                        HYVINKAA
Billing Contact State/Province:              HYVINKAA
Billing Contact Postal Code:                 05460
Billing Contact Country:                     Finland
Billing Contact Country Code:                FI
Billing Contact Phone Number:                +86.506454350
Billing Contact Facsimile Number:            +86.506454350
Billing Contact Email:                       info@wifi-update.biz
Technical Contact ID:                        ORGEH90335608666
Technical Contact Name:                      Erkki Hagstrom
Technical Contact Organization:              Erkki Hagstrom
Technical Contact Address1:                  Gesterbyntie 51
Technical Contact City:                      HYVINKAA
Technical Contact State/Province:            HYVINKAA
Technical Contact Postal Code:               05460
Technical Contact Country:                   Finland
Technical Contact Country Code:              FI
Technical Contact Phone Number:              +86.506454350
Technical Contact Facsimile Number:          +86.506454350
Technical Contact Email:                     info@wifi-update.biz
Name Server:                                 NS3.CNMSN.COM
Name Server:                                 NS4.CNMSN.COM
Created by Registrar:                        BIZCN.COM, INC.
Last Updated by Registrar:                   BIZCN.COM, INC.
Domain Registration Date:                    Tue Jan 21 20:20:12 GMT 2014
Domain Expiration Date:                      Tue Jan 20 23:59:59 GMT 2015
Domain Last Updated Date:                    Tue Jan 21 20:20:13 GMT 2014

Hosting info: 87.106.241.22

inetnum:        87.106.240.0 - 87.106.255.255
netname:        SCHLUND-CUSTOMERS
descr:          1&1 Internet AG
country:        DE
org:            ORG-SA12-RIPE
admin-c:        IPAD-RIPE
tech-c:         IPOP-RIPE
status:         ASSIGNED PA
remarks:        For abuse issues, please use only abuse@oneandone.net
mnt-by:         AS8560-MNT
source:         RIPE # Filtered

organisation:   ORG-SA12-RIPE
org-name:       1&1 Internet AG
org-type:       LIR
address:        1&1 Internet AG Axel Fischer Brauerstr.48 76135 Karlsruhe GERMANY
phone:          +49 721 91374 0
fax-no:         +49 721 91374 212
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        AS8560-MNT
mnt-ref:        SCHLUND-MNT
mnt-by:         RIPE-NCC-HM-MNT
admin-c:        IPAD-RIPE
admin-c:        RME9-RIPE
admin-c:        AFI5-RIPE
admin-c:        JR2342-RIPE
abuse-c:        ABDE2-RIPE
source:         RIPE # Filtered

role:           IP Administration
address:        1&1 Internet AG
admin-c:        AFI5-RIPE
admin-c:        RME9-RIPE
admin-c:        JR2342-RIPE
admin-c:        LTO3-RIPE
admin-c:        ZIG-RIPE
admin-c:        MI-RIPE
admin-c:        MINK-RIPE
admin-c:        VR-RIPE
tech-c:         AFI5-RIPE
tech-c:         RME9-RIPE
tech-c:         JR2342-RIPE
tech-c:         LTO3-RIPE
nic-hdl:        IPAD-RIPE
abuse-mailbox:  abuse@oneandone.net
mnt-by:         AS8560-MNT
source:         RIPE # Filtered

role:           IP Operations
address:        1&1 Internet AG
admin-c:        AFI5-RIPE
admin-c:        RME9-RIPE
admin-c:        JR2342-RIPE
admin-c:        LTO3-RIPE
tech-c:         AFI5-RIPE
tech-c:         RME9-RIPE
tech-c:         JR2342-RIPE
tech-c:         LTO3-RIPE
nic-hdl:        IPOP-RIPE
abuse-mailbox:  abuse@oneandone.net
mnt-by:         AS8560-MNT
source:         RIPE # Filtered

route:          87.106.0.0/16
descr:          SCHLUND-PA-5
origin:         AS8560
mnt-by:         AS8560-MNT
source:         RIPE # Filtered

Related md5s (Download samples from Malwr.com)
Betabot: 6327517dec04821d2416081937cf55fe