cloudgooglesdk.publicvm.com
Classification: Malicious
cloudgooglesdk.publicvm.com is a malicious hostname. Linked to Cobalt Strike malware. Reported by ThreatFox Abuse.ch, last seen 2023-02-16.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:39:11.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Cobalt Strike | ThreatFox Abuse.ch | 2022-08-06 14:19:33 | 2023-02-16 23:17:41 | malicious-activity | S0154 Cobalt Strike |
Tags
cobaltstrike cs-watermark-100000 lgdacom lg dacom corporation agentemis beacon cobeacon ghostIP addresses resolved by this hostname
- 95.85.76.54 (2022-09-22 01:09:57)
- 117.52.18.87 (2023-02-06 09:46:19)
- 117.52.18.132 (2023-02-23 11:50:30)
- 91.204.224.111 (2023-05-03 09:27:07)
- 127.0.0.1 (2026-10-18 04:39:11)
Whois information
- Domain
- publicvm.com
- TLD
- com
- First indexed
- 2022-08-06 14:19:33
- Last updated
- 2026-10-18 04:39:11