I’m not seeing any details about the victim IP address in DNSWatch. What’s wrong?

The challenge in providing IP addresses is that the ability to communicate with the browser and pull the information varies greatly browser to browser. Currently Internet Explorer and Safari don’t provide the capability at all. Clients that use Chrome, Firefox, or Edge browsers allow DNSWatch to pull information to report back the IP address. We are seeing more and more of the use of these browsers, which will give us more and more visibility of the addresses. In the immediate term, if you have any influence over which browser your clients use and suggest Chrome - you’ll be able to get more data and, in our opinion, keep your customers safer.

Also know that some security measures such as TLS may not allow us to collect the IP unless that data is not encrypted on the entry or exit points of communication. It’s something we know about and are trying to improve.