Resolved armadva.ru to 184.22.118.71 Server: armadva.ru Gate file: /arm/gs.php Other domains it tries to connect to if this one is down: armab.ru armatri.ru You can see a record of a previous attack in the virustotal sandbox records. Hosting infos: http://whois.domaintools.com/184.22.118.71