Back

chinaz.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain chinaz.com has experienced a significant number of events, with 1447 total occurrences recorded between July 2025 and June 2026. The majority of these events are attributed to historical data breaches (1265 events) and active infostealer logs (182 events). A notable portion of these events involved clients (1381) and employees (66). The data breaches are predominantly linked to "Combolist sources" (1257 events), suggesting compromised credentials. Infostealer activity is led by "Redline" (44 events), followed by "Rhadamanthys" (16 events) and "LummaC2" (13 events), indicating potential credential harvesting and unauthorized access. The high volume of data breaches, particularly from combolists, combined with active infostealer activity targeting client and employee accounts, presents a critical risk. The prevalence of Windows 11 and Windows 10 operating systems in the observed telemetry suggests that remediation efforts should focus on endpoint security, credential hygiene, and monitoring for unauthorized access attempts. Prioritizing the investigation of the 1265 data breaches and the 182 infostealer logs is crucial for understanding the scope of the exposure and mitigating further compromise.

Total Events

1,447
credential exposure events

Employee Affected Events

66
account email domain = chinaz.com

Client Affected Events

1,381
service target = chinaz.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
4002671330
peak month 348
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events182
Share13%
Data breaches
Events1,265
Share87%
Infostealer logs (13%)
182events
Data breaches (87%)
1,265events

66 compromised employee accounts pose an infrastructure risk, while 1,381 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

No Data Available

Malware Families Distribution

Distribution of Active Stealer Strains

Redline44
Rhadamanthys16
LummaC213
StealC9
Acreed8
Vidar6
RisePro4
Cthulhu4
Raccoon3

Top Login URLs

Top exposed services found in the event results

  1. 1https://my.chinaz.com143
  2. 2my.chinaz.com131
  3. 3https://chinaz.com60
  4. 4chinaz.com48
  5. 5http://my.chinaz.com/Login/Index40
  6. 6my.chinaz.com/Login/Index37
  7. 7https://my.chinaz.com/Login/Index31
  8. 8http://my.chinaz.com/Register28
  9. 9https://chinaz.com/home24
  10. 10http://my.chinaz.com24

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

China
Events57
United States
Events27
Netherlands
Events7
Türkiye
Events5
Indonesia
Events5
Singapore
Events4
Japan
Events4

Country Breakdown

  1. 1China57
  2. 2United States27
  3. 3Netherlands7
  4. 4Serbia5
  5. 5Türkiye5
  6. 6Indonesia5
  7. 7Singapore4
  8. 8Japan4

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 1138
Windows 10 Enterprise x6416
Windows 11 24H2 build 26220 (64 Bit)10
Windows 10 Pro5
Windows 105

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
1,257
Combolist pools
8
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.