The scan of showip.net on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with showip.net?

1 analysed samples communicate with this URL.

How was showip.net checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

showip.net - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned showip.net and returned a unknown verdict (score -12). The page resolved to 162.55.60.2 on Hetzner Online GmbH in DE. The domain was registered 8626 days ago through Gandi SAS. 5 domains and 1 IP were contacted, over 2 HTTP requests. 1 malware sample communicates with this URL. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://showip.net/
Domain: showip.net · IP: 162.55.60.2 · AS24940 · DE
Page title: ShowIP.net - What is my IP address?
HTTP status: 200 · text/html; charset=utf-8
Registrar: Gandi SAS · domain age 8626 days · created 2003-01-05
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Oct 8 19: · subject CN=showip.net
HTTP requests captured: 2
Scan tier: fast · observed 2026-08-19 13:08:07 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from showip.net. Each links to its full analysis.

litojame.pdf - contacted · dec2e64191d913ba8f676739df01b82c · first seen 2026-08-19

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Google Analytics

Contacted infrastructure

162.55.60.2 - AS24940 Hetzner Online GmbH (Germany)

Observed indicators

showip.net
pagead2.googlesyndication.com
www.openstreetmap.org
unpkg.com
www.googletagmanager.com
162.55.60.2
https://showip.net/
https://showip.net/favicon.ico
https://showip.net/favicon.svg
https://showip.net/assets/index-DT6wVaLp.css
https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8790158038613050
https://showip.net/showip-icon.svg
https://showip.net/tools/reverse-dns
https://showip.net/tools/dns-lookup
https://showip.net/tools/ip-in-cidr
https://showip.net/tools/cidr-calculator
https://showip.net/tools/range-to-cidr
https://showip.net/tools/subnet-splitter
https://showip.net/tools/user-agent-parser
https://showip.net/guides

Other scans of showip.net (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - unknown

Questions about showip.net

Is showip.net safe?: The scan of showip.net on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with showip.net?: 1 analysed samples communicate with this URL.
How was showip.net checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of showip.net

Scanned on MalwareAnalyzer by Cyble · Open interactive scan