antariscapital.com

Classification: Malicious

antariscapital.com is a malicious hostname. Linked to Cobalt Strike, Pay2Key malware. 3 sightings, last seen 2026-10-01. Seen in CO, in energy networks.

Current activity

  • Offline — no longer resolving. Last online 2026-10-01 20:19:23.
  • Malware distribution — This indicator is distributing malware.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154) PAY2KEY (S0556)

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in CO, across energy networks.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Pay2key Maltiverse Threat Observatory 2026-06-16 20:05:09 2026-10-01 20:15:13 country_code:co industry:energy-and-utilities malicious-activity malware S0556 Pay2Key
Cobalt Strike ThreatFox Abuse.ch 2022-12-30 19:48:47 2023-01-01 19:18:12 malicious-activity S0154 Cobalt Strike

Tags

cobaltstrike threatview-io agentemis beacon cobeacon

Whois information

Domain
antariscapital.com
TLD
com
DNSSEC
['unsigned']
Nameservers
OWEN.NS.CLOUDFLARE.COM, PAM.NS.CLOUDFLARE.COM, owen.ns.cloudflare.com, pam.ns.cloudflare.com
Registrant
Cloudflare, Inc.
Address
DATA REDACTED
City
DATA REDACTED
State
NSW
Country
AU — Australia 🇦🇺
Contact email
[email protected]
Domain created
2026-06-15 05:31:31
Domain expires
2029-06-15 05:31:31
First indexed
2022-12-30 20:17:43
Last updated
2026-10-01 20:19:23