Back

4tube.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain "4tube.com" is associated with a high-risk score of 85, primarily driven by a significant volume of historical data breaches (11,332 events) and active infostealer logs (2,010 events) over the observed period. These events collectively represent 99.9% of the total recorded events, impacting 13,226 clients and 116 employees. The data breaches are predominantly sourced from "Combolist sources," indicating a widespread compromise of credential stuffing lists. Malware analysis reveals a prevalence of infostealer families such as Redline, LummaC2, and Vidar, suggesting active campaigns targeting user credentials and sensitive information. The timeline shows a notable surge in employee and client-related events during March and April 2026, coinciding with the highest activity of infostealer logs. Given the high number of data breaches and the active presence of infostealer malware, the primary risk is the widespread compromise of user credentials, potentially leading to account takeovers, financial fraud, and further downstream attacks. The focus for remediation should be on immediate credential reset campaigns for affected users, enhanced monitoring for suspicious login activity, and a thorough review of data security practices to prevent future credential exposure. The prevalence of infostealers targeting Windows operating systems, particularly Windows 10 and 11, highlights the need for robust endpoint security and user education on phishing and malware threats.

Total Events

13,342
credential exposure events

Employee Affected Events

116
account email domain = 4tube.com

Client Affected Events

13,226
service target = 4tube.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
4,0002,6671,3330
peak month 3,924
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events2,010
Share15%
Data breaches
Events11,332
Share85%
Infostealer logs (15%)
2,010events
Data breaches (85%)
11,332events

116 compromised employee accounts pose an infrastructure risk, while 13,226 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender71
Windows Defender [ON]4

Malware Families Distribution

Distribution of Active Stealer Strains

Redline413
LummaC2295
Vidar255
Acreed152
Rhadamanthys137
StealC60
RisePro28
Raccoon16
Millenium10

Top Login URLs

Top exposed services found in the event results

  1. 14tube.com1,308
  2. 2https://www.4tube.com/1,058
  3. 3https://www.4tube.com1,006
  4. 4https://4tube.com872
  5. 5www.4tube.com599
  6. 64tube.com/554
  7. 7https://m.4tube.com/register429
  8. 8www.4tube.com/426
  9. 9https://m.4tube.com334
  10. 10m.4tube.com305

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

United States
Events187
Germany
Events164
Iran
Events94
Canada
Events88
India
Events85
Egypt
Events75
Netherlands
Events53
Malaysia
Events50

Country Breakdown

  1. 1United States187
  2. 2Germany164
  3. 3Iran94
  4. 4Canada88
  5. 5India85
  6. 6Egypt75
  7. 7Netherlands53
  8. 8Malaysia50

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 11216
Windows 10 Enterprise x64127
Windows 10 Enterprise110
Windows 10 Pro108
Windows 10 22H2 build 19045 (64 Bit)105

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
11,327
Combolist pools
5
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.