fd.v2downf.shop
Classification: Suspicious
fd.v2downf.shop is a suspicious hostname. Linked to Derusbi, Shadowpad malware. Reported by 1 threat source, last seen 2026-06-02.
Current activity
- Online — resolving/reachable. Last checked 2026-06-02 16:27:06.
MITRE ATT&CK associations
Malware families: DERUSBI (S0021) SHADOWPAD (S0596)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Derusbi | Maltiverse Threat Observatory | 2026-04-19 22:21:43 | 2026-06-02 15:21:36 | S0021 Derusbi | |
| Shadowpad | Maltiverse Threat Observatory | 2026-04-19 23:21:40 | 2026-06-02 15:21:36 | S0596 ShadowPad | |
| Trojan.generic | Maltiverse Threat Observatory | 2026-04-21 02:21:39 | 2026-06-02 15:21:36 |
IP addresses resolved by this hostname
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-06-02 16:27:06)
- 172.64.80.1 (2026-06-02 16:27:06)
Whois information
- Domain
- v2downf.shop
- TLD
- shop
- First indexed
- 2026-06-02 16:27:06
- Last updated
- 2026-06-02 16:27:07