Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
21 IOCs
The Ultimate Guide to Brand Protection with Censys
Threat Actors
Malware Families
Excerpt
On August 23, 2026, a PowerShell dropper reached out to hxxp://binance-idexchange[.]com/333.mp4 for its next stage. Binance, the world’s largest cryptocurrency exchange with hundreds of millions of users, had nothing to do with it — duh! This mp4 “video” file contained an encrypted, compressed 16.8 MB PowerShell script. Censys ARC published the full chain five days later. No one ever saw a fake Binance login page in this campaign. The brand name was…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →21 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | meta-ua.cc.cd | High | Score 58/100 | First seen |
| Domain | js.rbxcdn.com | Low | Score 30/100 | First seen |
| Domain | support.com | High | Score 58/100 | First seen |
| Domain | gta-six-leaks.com | High | Score 58/100 | First seen |
| IP | 43.157.174.200 | High | Score 58/100 | First seen |
| Domain | headshotz.ai | High | Score 58/100 | First seen |
| URL | http://binance-idexchange.com/333.mp4 | High | Score 63/100 | First seen |
| Domain | check-account.digital | High | Score 58/100 | First seen |
| Domain | mail-secure-login.digital | High | Score 58/100 | First seen |
| Domain | redirect.rbxinfra.net | High | Score 58/100 | First seen |
| Domain | bigmir-net.cc.cd | High | Score 58/100 | First seen |
| Domain | ab.com | High | Score 58/100 | First seen |
| Domain | beta.eggywall.cc | High | Score 58/100 | First seen |
| Domain | account-protection-team.icu | High | Score 58/100 | First seen |
| Domain | verification-service.cc.cd | High | Score 58/100 | First seen |
| Domain | www.roblox.com | High | Score 84/100 | First seen |
| Domain | r.oblox.com.et | High | Score 58/100 | First seen |
| IP | 45.194.44.46 | High | Score 58/100 | First seen |
| Domain | google.2oauth.com | High | Score 58/100 | First seen |
| Domain | i-ua.cc.cd | High | Score 58/100 | First seen |
| Domain | usps.xupqnqz.one | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…