cloudkey.digital
Classification: Malicious
cloudkey.digital is a malicious hostname. Linked to Cobalt Strike, Pay2Key malware. 6 sightings, last seen 2026-05-08. Seen in CO, in energy networks.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:37:06.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154) PAY2KEY (S0556)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO, across energy networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Pay2key | Maltiverse Threat Observatory | 2025-11-07 22:55:07 | 2026-05-08 02:30:12 | anomalous-activity country_code:co industry:energy-and-utilities malware | S0556 Pay2Key |
| Cobalt Strike | ThreatFox Abuse.ch | 2022-12-30 19:48:45 | 2023-01-01 19:18:14 | malicious-activity | S0154 Cobalt Strike |
Tags
cobaltstrike threatview-io agentemis beacon cobeaconIP addresses resolved by this hostname
- 23.227.178.59 (2023-03-05 17:40:18)
- 99.83.154.118 (2023-04-17 08:39:45)
- 176.46.152.50 (2025-11-12 04:17:59)
- 196.251.107.10 (2026-10-17 16:37:06)
Whois information
- AS name
- AS54540 Incero LLC
- Domain
- cloudkey.digital
- TLD
- digital
- First indexed
- 2022-12-30 20:17:44
- Last updated
- 2026-10-17 16:37:06