Risk Level: CRITICAL — Threat Score: 100/100

Assessment: dl.armour-inc-down.net is actively hosting 24 malware URLs across 2 resolved IP addresses. The number of active endpoints suggests ongoing, organized malware distribution. This domain should be blocked at the DNS or firewall level. Malware families associated with this domain include zip, pw-DR67KVLD, pw-4DKCUJ4DDXS.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 63 — Active: 24 — Resolved IPs: 2 — Abuse Reports: 0

First Seen: 2026-03-13T23:21:29 — Last Online: 2026-04-25T00:08:54

dl.armour-inc-down.net has been associated with 63 malware URLs , of which 24 are currently active . The primary threat types are malware_download, malware.

Active threat. This domain is currently serving malicious content. Multiple malware URLs have been identified on this domain. Network administrators should consider blocking this domain or monitoring traffic to it closely.