Resolved armadva.ru to 184.22.118.71
Server: armadva.ru
Gate file: /arm/gs.php
Other domains it tries to connect to if this one is down: armab.ru armatri.ru
You can see a record of a previous attack in the virustotal sandbox records.
Hosting infos: http://whois.domaintools.com/184.22.118.71