Urls are:
r00kiehttp.no-ip.info
rabbit801.no-ip.org
drhawks.no-ip.org
pooostealer.no-ip.org
To see what command is currently being sent, just add this to the end of the domain:
/bot.php?ip=0.0.0.0&os=Microsoft%20Windows%20xp&name=FBI-PC&id=Federal-Agent-1.3.3.7
The command will show up in plain text on the page.
Hosting infos: http://whois.domaintools.com/37.0.123.113
One other on different hosting:
watchshopper.no-ip.org/backup/
Hosting infos: http://whois.domaintools.com/91.217.178.192