IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE21 IOCs

The Ultimate Guide to Brand Protection with Censys

CE
Censys
Published October 9, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYUNC1151INFRASTRUCTUREmeta-ua.cc.cdjs.rbxcdn.comsupport.comCAPABILITYMETA StealerVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(1)
Victim

Indicators of Compromise

21 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainmeta-ua.cc.cdHighScore 58/100First seen
Domainjs.rbxcdn.comLowScore 30/100First seen
Domainsupport.comHighScore 58/100First seen
Domaingta-six-leaks.comHighScore 58/100First seen
IP43.157.174.200HighScore 58/100First seen
Domainheadshotz.aiHighScore 58/100First seen
URLhttp://binance-idexchange.com/333.mp4HighScore 63/100First seen
Domaincheck-account.digitalHighScore 58/100First seen
Domainmail-secure-login.digitalHighScore 58/100First seen
Domainredirect.rbxinfra.netHighScore 58/100First seen
Domainbigmir-net.cc.cdHighScore 58/100First seen
Domainab.comHighScore 58/100First seen
Domainbeta.eggywall.ccHighScore 58/100First seen
Domainaccount-protection-team.icuHighScore 58/100First seen
Domainverification-service.cc.cdHighScore 58/100First seen
Domainwww.roblox.comHighScore 84/100First seen
Domainr.oblox.com.etHighScore 58/100First seen
IP45.194.44.46HighScore 58/100First seen
Domaingoogle.2oauth.comHighScore 58/100First seen
Domaini-ua.cc.cdHighScore 58/100First seen
Domainusps.xupqnqz.oneHighScore 58/100First seen

IOC Relationship Graph

21 total IOCs
DomainIPURL
Domain10IP2URL1Actors1Malware1The Ultimate Guide to Brand Protection with CensysREPORTmeta-ua.cc.cdjs.rbxcdn.comsupport.comgta-six-leaks.comheadshotz.aicheck-account.digitalmail-secure-login.di…redirect.rbxinfra.netbigmir-net.cc.cdab.com43.157.174.20045.194.44.46http://binance-idexc…UNC1151META Stealer
scroll to zoom · drag to pan · click IOC to open