Back

epfoservices.in Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain epfoservices.in has experienced a significant volume of data exposure events, with 87.6% classified as historical data breaches and 12.4% as active infostealer logs, totaling over 66,000 events. The exposure primarily impacts clients, with a notable increase in client-related events observed in March 2026. Two employee-related events were also recorded in January and April 2026. The most prevalent malware families associated with these events include LummaC2, Vidar, and Redline, indicating a strong threat from information-stealing malware. The high risk score of 96 suggests a critical exposure. The prevalence of "Combolist sources" in leak repositories points to credential stuffing or account takeover attempts. Remediation efforts should focus on strengthening authentication mechanisms, enhancing endpoint security to detect and prevent infostealer activity, and conducting thorough investigations into the identified data breaches to understand the scope of compromised client and employee data. Given the nature of the domain, which appears to be related to employee provident fund services, the primary sector is likely Government Administration.

Total Events

66,250
credential exposure events

Employee Affected Events

2
account email domain = epfoservices.in

Client Affected Events

66,248
service target = epfoservices.in

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
20,00013,3336,6670
peak month 18,403
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events8,186
Share12%
Data breaches
Events58,064
Share88%
Infostealer logs (12%)
8,186events
Data breaches (88%)
58,064events

2 compromised employee accounts pose an infrastructure risk, while 66,248 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender127
Windows Defender McAfee Anti-Virus and Anti-Spyware8
Sentinel Agent2
Avast1

Malware Families Distribution

Distribution of Active Stealer Strains

LummaC21,401
Vidar990
Redline663
Rhadamanthys525
RisePro515
Acreed317
Remus166
StealC129
Raccoon59

Top Login URLs

Top exposed services found in the event results

  1. 1uanmembers.epfoservices.in8,678
  2. 2https://uanmembers.epfoservices.in7,639
  3. 3http://uanmembers.epfoservices.in/6,078
  4. 4uanmembers.epfoservices.in/5,702
  5. 5http://uanmembers.epfoservices.in/index.php4,655
  6. 6uanmembers.epfoservices.in/index.php4,148
  7. 7http://uanmembers.epfoservices.in4,072
  8. 8https://uanmembers.epfoservices.in/3,180
  9. 9https://uanmembers.epfoservices.in/index.php2,208
  10. 10http://uanmembers.epfoservices.in/uan_reg_form.php1,703

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

India
Events4,326
United States
Events92
Jordan
Events24
United Arab Emirates
Events20
Venezuela
Events20
Canada
Events20
United Kingdom
Events16
Saudi Arabia
Events15

Country Breakdown

  1. 1India4,326
  2. 2United States92
  3. 3Jordan24
  4. 4United Arab Emirates20
  5. 5Venezuela20
  6. 6Canada20
  7. 7United Kingdom16
  8. 8Saudi Arabia15

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 11 Home Single Language428
Windows 11425
Windows 11 24H2 build 26100 (64 Bit)329
Windows 10 Pro327
Windows 7 Professional [x64]324

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
58,027
Combolist pools
37
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.