IOC Radar
DomainHighVerifiedSignal 37/100

e-mali.ru

First Seen
Dec 14, 2021
Last Seen
Jun 6, 2026
Dec 14
First Seen
1645d ago
Jun 6
Last Seen
10d ago
6
Reports
source reports
37%
Confidence
high
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
37%
Signal Score
37 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

48 techniques

Feed Intelligence Summary

6 reports37% confidence
6
Source reports
37%
Confidence score
Category tags
account discoveryaccount profilingaccount takeoveractive scanactive scanningattachment phishingauthentication attackbecbotnetbotnet activitybrand impersonationbrute forcebusiness email compromisecommand and controlcompromised accountcredential accesscredential harvestingcredential phishingcredential stuffingcredential theftdata exfiltrationdata store exposureddosdenial of servicedistributed attacksexploitation activityfinanceform submissionfraudftp brute forcehtml smugglinghttp brute forcehttps phishinghydra attackidentity & access exploitationindicatorinjection activitylink injectionlink manipulationlink redirectionlogin attacklogin attemptsmalicious attachmentmalicious linksmalicious softwaremalwaremalware deliverymalware distributionmedusa attackmobile threatnetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork service scanningnmap scanphishingphishing attackphishing campaignphishing-databaseprocess injectionprotocol exploitationransomwarerdp scanningreconnaissancereconnaissance activityremote accessremote servicesresearchedscams & fraudsecurity operationsservice enumerationservice scansmb scanningsms phishingsmtp brute forcesocial engineeringspearphishingssh attacksyn scant1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1059.004t1071.001t1076t1078t1078.004t1110t1110.001t1110.002t1110.003t1189t1190t1192t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1534t1552t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1567t1567.001t1589t1589.002t1592t1595t1595.001t1595.002t1595.003t1598t1598.003tcp scantcp scanningtelnet threatthreat actorthreat intelligencetor nodeudp scanurgent requestvoice phishingvulnerability scanweb securitywebsite phishing

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain e-mali.ru has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnets, malware, phishing, and ransomware. First observed on December

Threat ScoreLow Risk
37
SIGNAL
Signal Score
37%
Confidence
6
Reports
First seenDec 14, 2021
Last seenJun 6, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

registrar
R01-RU
description
LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
domain rank
-1
raw
Last updated on 2022-02-12T07:51:31Z created: 2021-12-12T16:28:19Z domain: E-MALI.RU nserver: ns1.fastfox.pro. nserver: ns2.fastfox.pro. paid-till: 2022-12-12T16:28:19Z registrar: R01-RU source: TCI state: REGISTERED, DELEGATED, VERIFIED
subdomains count
2

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 4 years ago · Last seen 10 days ago
Appeared in 6 threat reports