URLs and sub domains distributing the malware or acting as a redirector:
Domain playart.org is at: 96.0.239.24 (rev.opentransfer.com.24.239.0.96.in-addr.arpa)