URLs and sub domains distributing the malware or acting as a redirector:
Domain goder-it.de is at: 95.156.198.34 (mail.webspace-experte.de)