YSK: thisismyip.com (website to display your IP) had inserted new code to its website that is detected by Kaspersky antivirus and Fortinet as malicious; Here are some alternatives to use instead

6 months ago by beep to c/youshouldknow

I know that a lot of VPN users have it as a homepage to their browser, that is why I wanted to publish this warning.

You can replace it with:

Una 44 points 6 months ago path: 0 23153757, hotness: undefined, score: 44, children: 3
Alexstarfire 25 points 6 months ago

path: 0 23153757 23157836, hotness: undefined, score: 25, children: 0
MIDItheKID 3 points 6 months ago

Glad somebody else posted it. Glad it still exists. Some of the internet is still hilarious and amazing.

path: 0 23153757 23173516, hotness: undefined, score: 3, children: 0
solxix 3 points 6 months ago

webpage blocked

path: 0 23153757 23170967, hotness: undefined, score: 3, children: 0
bamboo 23 points 6 months ago

There is also ifconfig.me which works amazingly on the command like with curl ifconfig.me

path: 0 23152168, hotness: undefined, score: 23, children: 7
eco_game 3 points 6 months ago

The same works with ipinfo.io, it's what I usually use.

path: 0 23152168 23152252, hotness: undefined, score: 3, children: 1
bamboo 0 points 6 months ago

Awesome, good to know. Nice it has more info in a JSON blob.

path: 0 23152168 23152252 23165703, hotness: undefined, score: 0, children: 0
irelephant 0 points 6 months ago
path: 0 23152168 23160515, hotness: undefined, score: 0, children: 4
floquant 4 points 6 months ago

That won't tell you the public IP unless you're on a directly-connected machine

path: 0 23152168 23160515 23165391, hotness: undefined, score: 4, children: 0
bamboo 2 points 6 months ago

That's not how this works. That's not how any of this works.

path: 0 23152168 23160515 23165715, hotness: undefined, score: 2, children: 2
Oha 1 point 6 months ago

exept it does? At least in ipv6 land

path: 0 23152168 23160515 23165715 23170361, hotness: undefined, score: 1, children: 1
bamboo 1 point 6 months ago

i could see a situation where a host that only speaks IPv4 would need to add my IP to an allow list, and therefore I would need to check what IPv4 address I appear as, even though I am running IPv6.

path: 0 23152168 23160515 23165715 23170361 23172884, hotness: undefined, score: 1, children: 0
AverageEarthling 20 points 6 months ago

icanhazip.com

path: 0 23152373, hotness: undefined, score: 20, children: 1
smiletolerantly 4 points 6 months ago

This is the one true answer.

Just an IP, nothing else. And easily curlable.

path: 0 23152373 23153147, hotness: undefined, score: 4, children: 0
mysticpickle 19 points 6 months ago

path: 0 23159201, hotness: undefined, score: 19, children: 0
Alvaro 14 points 6 months ago path: 0 23153405, hotness: undefined, score: 14, children: 3
s08nlql9 1 point 6 months ago

Was expecting a robotic voice, is this AI?

path: 0 23153405 23160150, hotness: undefined, score: 1, children: 1
Alvaro 3 points 6 months ago

It exists before AI was a thing. Just a dude recording himself and making a software that plays it relatively smoothly.

The domain was registered in 2012

path: 0 23153405 23160150 23160785, hotness: undefined, score: 3, children: 0
sik0fewl 1 point 6 months ago

🤣

path: 0 23153405 23153999, hotness: undefined, score: 1, children: 0
TheChargedCreeper864 7 points 6 months ago

I have DuckDuckGo set as my default search engine, so I just search for "ip" and Bob's your uncle

path: 0 23159585, hotness: undefined, score: 7, children: 0
heydo 7 points 6 months ago

Is it malicious code hosted on the website? Or are they saying that visiting that site is an indicator of compromise because they've malware commonly visiting that site?

path: 0 23153819, hotness: undefined, score: 7, children: 2
asqapro 8 points 6 months ago

Looks like the domain registration expired, according to https://lookup.icann.org/en/lookup

Fortinet marked the website as "malicious", but it doesn't seem to give an explanation as to why it's been given that classification (looked up here: https://www.fortiguard.com/webfilter)

Kasperky wanted an account (and possibly a subscription) to look up the website and I'm not going to give them any of my information so I'm not sure if they gave an explanation as to why the website is flagged.

Visiting https://thisismyip.com/ as of now just redirects to a Namecheap landing page so I doubt there's any actual malware on the website. I think Fortinet and Kaspersky preemptively marked it for when a malicious actor picks up the name and starts hosting actual viruses.

path: 0 23153819 23156997, hotness: undefined, score: 8, children: 0
beep -3 points 6 months ago

Hosted on the website.

path: 0 23153819 23153990, hotness: undefined, score: -3, children: 0
mumblerfish 6 points 6 months ago

I always use check.torproject.org. If I'm not on Tor, it gives me my IP, if I am on Tor it verifies that. Good for both.

path: 0 23153238, hotness: undefined, score: 6, children: 0
Raptor_007 5 points 6 months ago path: 0 23156585, hotness: undefined, score: 5, children: 2
Scrollone 1 point 6 months ago

It's a good old service, but unfortunately it's so old that it doesn't support IPv6 connections

path: 0 23156585 23158307, hotness: undefined, score: 1, children: 1
bamboo 2 points 6 months ago

I just checked with curl and it showed me my IPv6 IP

path: 0 23156585 23158307 23165735, hotness: undefined, score: 2, children: 0
attero 5 points 6 months ago path: 0 23160957, hotness: undefined, score: 5, children: 0
Otherbarry 5 points 6 months ago path: 0 23152265, hotness: undefined, score: 5, children: 0
JigglySackles 4 points 6 months ago path: 0 23171116, hotness: undefined, score: 4, children: 0
Davel23 3 points 6 months ago path: 0 23152822, hotness: undefined, score: 3, children: 0
MaskedNybbles 3 points 6 months ago
#!/usr/bin/sh  
dig -4 +short @resolver2.opendns.com myip.opendns.com  
#!/usr/bin/pwsh  
Resolve-DnsName -Server resolver2.opendns.com -Name myip.opendns.com -Type A | % { echo $_.IPAddress }  

There should be an IPv6 resolver, but I don't remember and am currently unable to test. My PowerShell skills are also effectively non-existent.

path: 0 23153929, hotness: undefined, score: 3, children: 10
Danitos 3 points 6 months ago

A simpler and easy to memorize alternative:

curl ifconfig.me
path: 0 23153929 23154558, hotness: undefined, score: 3, children: 5
digdilem 3 points 6 months ago

That still relies on an external website, whereas dig uses just DNS

path: 0 23153929 23154558 23158645, hotness: undefined, score: 3, children: 0
MaskedNybbles 1 point 6 months ago

I saw it used in another comment, and am already aware of the use of curl for such a task, but choose to query DNS services instead—especially in scripts.

path: 0 23153929 23154558 23154644, hotness: undefined, score: 1, children: 3
Danitos 1 point 6 months ago

but choose to query DNS services instead—especially in scripts.

Why? What advantages do you get?

path: 0 23153929 23154558 23154644 23155742, hotness: undefined, score: 1, children: 2
friend_of_satan 7 points 6 months ago

In order to connect to a site like wtfismyip.com you have to do a dns query for the IP address of the server, then query the http port on that IP address, but what if instead, that first dns query gave the answer to your question?

path: 0 23153929 23154558 23154644 23155742 23155897, hotness: undefined, score: 7, children: 0
MaskedNybbles 3 points 6 months ago

I worry less about the service breaking, changing, or otherwise disappearing, over a random website.

EDIT: Also what was said in a sibling comment.

path: 0 23153929 23154558 23154644 23155742 23155890, hotness: undefined, score: 3, children: 0
bamboo 1 point 6 months ago

Neat, how can you check IPv6? I was able to get my IPv4 address by querying with an A record, but tried with AAAA which doesn't respond with an answer.

path: 0 23153929 23165792, hotness: undefined, score: 1, children: 3
MaskedNybbles 2 points 6 months ago

dig -6 +short @resolver2.opendns.com myip.opendns.com AAAA

Note: You have to ensure you are actually contacting the server with IPv6.

path: 0 23153929 23165792 23166133, hotness: undefined, score: 2, children: 2
bamboo 1 point 6 months ago

Ahh yeah, works with @resolver2.opendns.com so I guess my DNS resolver isn't supporting IPv6 or something like that?

path: 0 23153929 23165792 23166133 23166360, hotness: undefined, score: 1, children: 1
MaskedNybbles 1 point 6 months ago

This is a service provided by some DNS hosts, with their own special subdomains, and is not universal. They may also require slightly different options.

Other options include:

  • Google (query for txt record): @ns1.google.com o-o.myaddr.l.google.com

  • Akaimai (query for txt record): @ns1-1.akamaitech.net whoami.akamai.net

  • Cloudflare: @1.1.1.1 whoami.cloudflare

  • Cisco (there are four, as far as can tell): @resolver[1-4].opendns.com myip.opendns.com

…and likely others.

path: 0 23153929 23165792 23166133 23166360 23166634, hotness: undefined, score: 1, children: 0
kmirl 3 points 6 months ago

For us Linux users (BTW), this wtfismyip script just dumps a text string. Just save it to /usr/local/bin or some other location in your path and make it executable, and install the lynx text www browser if you don't have it installed already.

There are a lot of ways to do this, but this works and I'm lazy...

root@tux:~# cat $(which wtfismyip)
#!/bin/bash

printf "%s\n" "Your fucking IP address is $(lynx -dump -nolist http://wtfismyip.com/text)."
root@tux:~# wtfismyip
Your fucking IP address is 13.107.226.41.
path: 0 23171218, hotness: undefined, score: 3, children: 0
forestbeasts 2 points 6 months ago

We have a little one, in case it's useful. https://ip.brightfur.net/ Super simple. Works with curl too (autodetects whether to give you plain text or an HTML webpage).

It's like 20 lines of PHP and most of that's HTML.

-- Frost

path: 0 23156477, hotness: undefined, score: 2, children: 0
Strawberry 2 points 6 months ago

ip.me also works well in the terminal with curl. The default response is plaintext

path: 0 23176142, hotness: undefined, score: 2, children: 0
Semi_Hemi_Demigod 2 points 6 months ago

curl ifconfig.me

Not sure about Linux, but on a Mac you can put it on your clipboard with

curl ifconfig.me | pbcopy

path: 0 23152647, hotness: undefined, score: 2, children: 4
victorz 2 points 6 months ago

xh ifconfig.me | wl-copy

👍

path: 0 23152647 23153352, hotness: undefined, score: 2, children: 3
victorz 2 points 6 months ago

Oookay, I guess it detects the user agent and only sends the IP number when it detects curl. Using xh did not work as intended.

path: 0 23152647 23153352 23153382, hotness: undefined, score: 2, children: 2
forestbeasts 2 points 6 months ago

Huh. Is it going by user-agent or something? Weird.

Our own tiny one goes by the Accept header. If xh sets that to text/html you'll get an HTML webpage though.

path: 0 23152647 23153352 23153382 23156515, hotness: undefined, score: 2, children: 1
victorz 2 points 6 months ago

Some sites go by that, some go by user agent. I believe xh can fake it's user agent, if I'm not mistaken.

A good compromise would be to go by known user agents, but also heed the accept header. 👍

path: 0 23152647 23153352 23153382 23156515 23158538, hotness: undefined, score: 2, children: 0
trk 2 points 6 months ago

I use thiscomputer.info

It's just text. It shows a bit more than just your IP. And it's easy to remember.

path: 0 23171823, hotness: undefined, score: 2, children: 0
alt_xa_23 2 points 6 months ago path: 0 23170709, hotness: undefined, score: 2, children: 0
hushable 2 points 6 months ago

I've been using wgetip.com for over a decade now

path: 0 23153032, hotness: undefined, score: 2, children: 0
Luci 2 points 6 months ago

I’ve been using ifconfig.me for a while, you can curl it on the command line

path: 0 23153505, hotness: undefined, score: 2, children: 0
binom 2 points 6 months ago path: 0 23159330, hotness: undefined, score: 2, children: 0
aesthelete 2 points 6 months ago

I wrote my own. It's one of the easiest possible services to write.

path: 0 23158462, hotness: undefined, score: 2, children: 0
limonfiesta 2 points 6 months ago

dnsleaktest.com

ipleak.net

Check your IP and your DNS, all in one.

path: 0 23155585, hotness: undefined, score: 2, children: 0
somethingsomethingidk 2 points 6 months ago

You can just search ip on ddg and it'll show you

path: 0 23155840, hotness: undefined, score: 2, children: 0
hexagonwin 2 points 6 months ago

i usually use icanhazip.com, seems to work well enough

path: 0 23157741, hotness: undefined, score: 2, children: 0
iglou 1 point 6 months ago path: 0 23160022, hotness: undefined, score: 1, children: 0
attero 1 point 6 months ago
path: 0 23160902, hotness: undefined, score: 1, children: 0
AnalogHole 1 point 6 months ago

Am.i.mullvad.net

path: 0 23166550, hotness: undefined, score: 1, children: 0
NetriX 1 point 4 months ago

YSK: I’m the webmaster and developer of thisismyip.com, and I can assure you that the site does not contain any malicious code.

Kind regards.
j6nGJlOFvYYAVLp.png

path: 0 24063878, hotness: undefined, score: 1, children: 0
irelephant 1 point 6 months ago
path: 0 23160494, hotness: undefined, score: 1, children: 0
youshouldknow
youshouldknow

@lemmy.world

login for more options
47866
779
4106

YSK - for all the things that can make your life easier!

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must begin with YSK.

All posts must begin with YSK. If you're a Mastodon user, then include YSK after @youshouldknow. This is a community to share tips and tricks that will help you improve your life.



Rule 2- Your post body text must include the reason **WHY** YSK:

In your post's text body, you must include the reason "Why" YSK: It’s helpful for readability, and informs readers about the importance of the content.



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding non-YSK posts.

Provided it is about the community itself, you may post non-YSK posts using the [META] tag on your post title.



Rule 7- You can't harass or disturb other members.

If you harass or discriminate against any individual member, you will be removed.

If you are a member, sympathizer or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people and you were provably vocal about your hate, then you will be banned on sight.

For further explanation, clarification and feedback about this rule, you may follow this link.



Rule 8- All comments should try to stay relevant to their parent content.

Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- The majority of bots aren't allowed to participate here.

Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.



Rule 11- Posts must actually be true:

Disinformation, trolling, and being misleading will not be tolerated. Repeated or egregious attempts will earn you a ban. This also applies to filing reports: If you continually file false reports YOU WILL BE BANNED! We can see who reports what, and shenanigans will not be tolerated. We are not here to ban people who said something you don't like.



Rule 12- Linking directly to a video as a source is not acceptable.

Video only posts are responsible for an outsized portion of rules violations. Your post must contain text and meet the requirements of the previous rules.



Rule 13- If you file a report, include what specific rule is being violated and how.

Partnered Communities:

You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.

Community Moderation

For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.

Credits

Our icon(masterpiece) was made by @clen15!

go to feed...