filev2.getsession.org
Classification: Suspicious
filev2.getsession.org is a suspicious hostname. Linked to Shai-Hulud malware. Reported by 1 threat source, last seen 2026-05-12.
Current activity
- Online — resolving/reachable. Last checked 2026-07-18 22:43:41.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: SHAI-HULUD (S9008)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unknown malware | ThreatFox Abuse.ch | 2026-05-12 09:22:50 | 2026-05-12 09:25:03 | malicious-activity | |
| Shai-Hulud | ThreatFox Abuse.ch | 2026-05-12 09:23:09 | 2026-05-12 09:25:03 | malicious-activity | S9008 Shai-Hulud |
IP addresses resolved by this hostname
- 136.243.111.19 (2026-07-18 22:43:41)
- 2a01:4f8:211:3cb::2 (2026-07-18 22:43:41)
- 2a01:4f8:171:1187::2 (2026-07-18 22:43:41)
- 2a01:4f8:171:3162::2 (2026-07-18 22:43:41)
- 148.251.177.112 (2026-07-18 22:43:41)
- 157.90.192.70 (2026-07-18 22:43:41)
Whois information
- Domain
- getsession.org
- TLD
- org
- DNSSEC
- ['unsigned']
- Nameservers
- anirban.ns.cloudflare.com, lana.ns.cloudflare.com
- Registrant
- Porkbun LLC
- Address
- Kalkofnsvegur 2
- City
- Reykjavik
- State
- Capital Region
- Country
- IS — Iceland 🇮🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2019-10-14 05:27:34
- Domain expires
- 2027-10-14 05:27:34
- First indexed
- 2026-05-12 09:25:03
- Last updated
- 2026-07-18 22:43:41