URLs and sub domains distributing the malware or acting as a redirector:
Domain www.lifeshiftdevelopment.com is at: 97.79.238.227 (gvo238227.gvodatacenter.com)