DomainHighVerifiedSignal 72/100
cdn.kleymarket.ru
Location
TajikistanFirst Seen
May 7, 2026
Last Seen
May 13, 2026
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
72%
Signal Score
72 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
5 reports72% confidence
5
Source reports
72%
Confidence score
Category tags
abusealienvault_ransomwareaviation sectorbad reputationc2 exfiltrationcaicaeurope/asiaindicatormalwaremoscow summitmulti-stage payloadnetworkoperation silent rotorphishingransomwareresearchedrussiarussian federationrust malwarespear phishingt1016t1027t1033t1036.004t1041t1059.003t1071.001t1082t1083t1090.001t1105t1106t1140t1204.002t1566.001tajikistantor nodeunmanned aerial systemsurlsyara
Activity Timeline
May 13May 13
Threat Activity Heatmap
· Peak: 2026-05-13LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain cdn.kleymarket.ru, originating from Tajikistan, has emerged as a significant indicator of compromise (IOC) in recent threat intelligence reports. First observed on May
Threat ScoreHigh Risk
72
SIGNAL
Signal Score
72%
Confidence
5
Reports
First seenMay 7, 2026
Last seenMay 13, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- description
- Command and Control domains for Malware. These domains are extracted from a number of sources, and are suspicious.
- raw
- Create date: 2026-04-01 00:00:00 Domain name: kleymarket.ru Expiry date: 2027-05-02 00:00:00 Name server 1: ns1.sprinthost.ru Name server 2: ns3.sprinthost.net Name server 3: ns2.sprinthost.ru Name server 4: ns4.sprinthost.net Query time: 2026-04-03 23:36:07
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 1 month ago · Last seen 1 month ago
Appeared in 5 threat reports