URLs and sub domains distributing the malware or acting as a redirector:
Domain charityairsupport.org is at: 98.124.198.1 (redirector-ash.enom.com)