anjuke.com Domain Breach Exposure Report

The domain anjuke.com has experienced a significant number of security events over the past year, with a risk score of 80. The majority of these events are categorized as historical data breaches (1691) and active infostealer logs (1306), indicating a substantial exposure of sensitive information. The infostealer logs are primarily attributed to malware families such as Rhadamanthys (48.5%) and Redline (19.5%), suggesting a widespread compromise of credentials and potentially other sensitive data. The data breaches are largely sourced from combolist repositories (96.4%), implying that credentials exposed through these lists have been leveraged against the domain's services. The timeline shows a notable increase in client-related events from September 2025 onwards, with employee-related events also appearing during this period. The targeted services include login portals and password reset functionalities, which are common targets for credential stuffing and account takeover attacks. The prevalence of Windows operating systems in the telemetry suggests that endpoints running these systems are likely affected. Given the high volume of data breaches and infostealer activity, immediate focus should be placed on credential hygiene, multi-factor authentication enforcement, and a thorough review of access controls for all affected services, particularly the vip.anjuke.com and cloud-passport.anjuke.com domains.