myexternalip.com - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned myexternalip.com and returned a unknown verdict (score 0). The page resolved to 34.160.111.145 on Google LLC in US. The domain was registered 5863 days ago through GoDaddy.com, LLC. 13 domains and 1 IP were contacted, over 1 HTTP request. 2 malware samples communicate with this URL (Mikey, Disstl). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://myexternalip.com/ - Domain: myexternalip.com · IP: 34.160.111.145 · AS396982 · US
- Page title: My External IP address - 32.236.225.208
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: GoDaddy.com, LLC · domain age 5863 days · created 2010-08-02
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 8 19: · subject CN=ifconfig.me
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-22 05:23:14 UTC
Malware communicating with this URL (2)
These samples were observed contacting or being served from myexternalip.com. Each links to its full analysis.
- Mikey - contacted ·
dbe6eb8fa069c3edcea4a87b1193539b· first seen 2026-08-22 - Disstl - referenced ·
79b0b54b9210b13630c71a37822c0061· first seen 2026-08-14
Antivirus & YARA (1 of 48 engines)
- YARA: delivr.to detections [yara]: DLV_Maldoc_VBA_AutoExec (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- A signature matched text in the page (DLV_Maldoc_VBA_AutoExec) — pages that discuss malware can match, so this alone is not a malicious verdict
Contacted infrastructure
- 34.160.111.145 - AS396982 Google LLC (United States)
Observed indicators
- myexternalip.com
- fonts.googleapis.com
- ipinfo.io
- en.wikipedia.org
- github.com
- tom-chapman.uk
- www.minecraftforum.net
- www.mashupnerd.com
- flattr.com
- tools.ietf.org
- curl.haxx.se
- www.gnu.org
- www.freebsd.org
- 34.160.111.145
- https://myexternalip.com/
- https://myexternalip.com/static/styles/style.css
- https://fonts.googleapis.com/css?family=Open+Sans&display=swap
- https://ipinfo.io/?utm_source=myexternalip.com&utm_medium=referral&utm_campaign=upsell_sister_sites
- http://en.wikipedia.org/wiki/IP_address
- http://en.wikipedia.org/wiki/Internet
Other scans of myexternalip.com (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 14 Aug 2026 - unknown ·
http://myexternalip.com/raw
Questions about myexternalip.com
- Is myexternalip.com safe?
- The scan of myexternalip.com on 22 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with myexternalip.com?
- 2 analysed samples communicate with this URL, including Mikey, Disstl.
- How was myexternalip.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of myexternalip.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan