The static-13333.kxcdn.com server is now being used for a huge number of these scams to hold all of the images and videos. The affiliates are all using the same sites derived from the same images on the same servers. Whether they are running the Amazon share scam or Bitcoin Code, they all seem to use static-13333.kxcdn.com for their image repository.
Below is a list of historical IPs from the static-13333.kxcdn.com domain.
| IP Addresses |
Organization |
First Seen |
Last Seen |
Duration Seen |
| 185.172.148.132185.172.148.128 |
PROINITY
|
2017-01-30 (5 years) |
2021-09-10 (today) |
5 years |
| 130.211.10.149 |
Google LLC
|
2016-10-03 (5 years) |
2017-01-30 (5 years) |
4 months |
| 136.243.1.25 |
Hetzner Online GmbH
|
2015-01-12 (7 years) |
2016-10-03 (5 years) |
2 years |
| 176.31.239.132 |
OVH SAS
|
2013-09-25 (8 years) |
2015-01-12 (7 years) |
1 year |
| 205.209.137.110 |
DCS Pacific Star, LLC
|
2008-11-30 (13 years) |
2013-02-04 (9 years) |
4 years |
| 58.221.32.163 |
No.31,Jin-rong Street
|
2008-11-12 (13 years) |
2008-11-30 (13 years) |
18 days |
| 219.234.87.13 |
Beijing Dian-Xin-Tong Network Technologies Co., Ltd.
|
2008-09-01 (13 years) |
2008-11-12 (13 years) |
2 months |
And here the current IPs of that host.
The DNS hosting is by 'Amazon Route 53'