Back

eastday.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain eastday.com exhibits a high-risk profile due to a significant volume of historical data breaches, totaling 10,830 events, which represent 99.4% of all observed events. Additionally, 67 active infostealer logs were detected, primarily targeting employee credentials. The timeline indicates a surge in employee and client-related events during September 2025 and February 2026, coinciding with the peak of data breach activity. Malware families such as Redline and LummaC2 were identified, suggesting active credential harvesting and data exfiltration attempts. The primary exposure stems from extensive data breaches and ongoing infostealer activity, impacting a large number of employees (10,549) and clients (348). The presence of "Combolist sources" and "Database dumps" within leak repositories further indicates that compromised credentials may be readily available. Remediation efforts should focus on securing authentication mechanisms, enhancing endpoint security to detect and prevent infostealer malware, and conducting thorough investigations into the root causes of the historical data breaches to prevent recurrence. The identified targeted services are predominantly related to the eastday.com domain, including login and home pages, highlighting critical areas for security hardening.

Total Events

10,897
credential exposure events

Employee Affected Events

10,549
account email domain = eastday.com

Client Affected Events

348
service target = eastday.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
5,0003,3331,6670
peak month 4,691
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events67
Share1%
Data breaches
Events10,830
Share99%
Infostealer logs (1%)
67events
Data breaches (99%)
10,830events

10,549 compromised employee accounts pose an infrastructure risk, while 348 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

No Data Available

Malware Families Distribution

Distribution of Active Stealer Strains

Redline8
LummaC27
Vidar2
StealC1

Top Login URLs

Top exposed services found in the event results

  1. 1eastday.com295
  2. 2https://eastday.com44
  3. 3https://eastday.com/login27
  4. 4http://mp.eastday.com/17
  5. 5eastday.com/login14
  6. 6https://eastday.com/13
  7. 7https://eastday.com/logon12
  8. 8https://eastday.com/home10
  9. 9eastday.com/10
  10. 10https://www.eastday.com9

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

United States
Events10
Germany
Events5
Netherlands
Events3
Japan
Events2
United Kingdom
Events2
South Korea
Events2
Austria
Events2
Italy
Events2

Country Breakdown

  1. 1United States10
  2. 2Germany5
  3. 3Netherlands3
  4. 4Japan2
  5. 5United Kingdom2
  6. 6South Korea2
  7. 7Austria2
  8. 8Italy2

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

Citrix12

Operating System Distribution

Distribution of compromised endpoint builds

Windows 1117
Windows Server 2003 x322
Windows 11 [U4779]2
Windows 10 Pro2
Windows Server 2008 x322

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
5,074
Combolist pools
5,756
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.