This NFT Logs Your IP Address

“Right Click + Saving” OpenSea Visitor IPs

The IP Address Right Click + Savoooor as viewed on OpenSea.io
Metadata stored as a json file on IPFS. The animation_url points to html shown below.
HTML page that is hosted on IPFS but fetches data from IPLogger.org. The HTML loads the gif as an image and an invisible iplogger.org pixel as a background image. There’s also some HTML that resizes the image to fill the frame.
IPlogger.org displays the IP address, referring page, and user agent data for anyone who viewed the NFT on OpenSea.io.

Real World Impact

OpenSea’s ToS say I can’t use your right click+saved IP address data for marketing activity.
Using method #2 “in the wild”.

Mitigation

Block scripts

Conclusions

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store