URLs and sub domains distributing the malware or acting as a redirector:
Domain amnd.org is at: 173.254.16.206 (173-254-16-206.unifiedlayer.com)