4sv.xyz
Classification: Suspicious
4sv.xyz is a suspicious hostname. Linked to Get2 malware. Reported by 1 threat source, last seen 2020-12-11.
Current activity
- Online — resolving/reachable. Last checked 2025-10-19 01:22:23.
MITRE ATT&CK associations
Malware families: GET2 (S0460)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Get2 | Maltiverse Research Team | 2020-12-11 17:17:36 | 2020-12-11 17:17:36 | malicious-activity | S0460 Get2 |
Tags
downloader ip filtering cve-2016-4264 geofencing office vba macro covid19IP addresses resolved by this hostname
- 150.95.55.157 (2020-12-11 17:17:37)
- 76.223.54.146 (2025-10-19 01:22:23)
- 13.248.169.48 (2025-10-19 01:22:23)
Whois information
- AS name
- AS7506 GMO Internet,Inc
- Domain
- 4sv.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- NS5.AFTERNIC.COM, NS6.AFTERNIC.COM, VERIFICATION-GAKBZZZQMT6GKCPLW4EFPP.NS101.VERIFY.HN, ns5.afternic.com, ns6.afternic.com, verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn
- Registrant
- GMO Internet, Inc.
- Address
- 26-1 Sakuragaoka-cho, Cerulean Tower 11F
- City
- Shibuya-ku
- State
- Tokyo
- Country
- JP — Japan 🇯🇵
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-08-14 06:41:31
- Domain expires
- 2026-08-14 23:59:59
- First indexed
- 2020-12-11 17:17:36
- Last updated
- 2025-10-19 01:22:25