URLs and sub domains distributing the malware or acting as a redirector:
Domain creamtotalbolltext.info is at: 195.230.125.88 (195.230.125.88)