fe9a381a.shop

Classification: Malicious

fe9a381a.shop is a malicious hostname. Linked to Darkwatchman malware. Reported by 1 threat source, last seen 2025-02-08.

Current activity

  • Offline — no longer resolving. Last online 2025-02-08 13:22:20.

MITRE ATT&CK associations

Malware families: DARKWATCHMAN (S0673)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DarkWatchman ThreatFox Abuse.ch 2025-02-06 14:04:12 2025-02-08 13:22:18 malicious-activity S0673 DarkWatchman

Tags

geo ukr

Whois information

Domain
fe9a381a.shop
TLD
shop
First indexed
2025-02-06 14:17:22
Last updated
2026-08-15 19:29:03