URLs and sub domains distributing the malware or acting as a redirector:
Domain esang.ir is at: 5.104.105.40 (5.104.105.40)