feng.com Domain Breach Exposure Report

The domain feng.com exhibits a high-risk score of 94, primarily driven by a significant volume of historical data breaches (73.7%) and active infostealer logs (26.3%) observed between July 2025 and June 2026. A substantial number of client accounts (22,604) and employee accounts (607) have been exposed. The data indicates a strong association with infostealer malware families such as Redline, Rhadamanthys, and LummaC2, which are frequently used to exfiltrate credentials and sensitive information. The targeted services are predominantly related to the feng.com passport authentication system, suggesting a focus on compromising user login credentials. The majority of the observed data originates from combolist sources, indicating a widespread credential stuffing or brute-force attack vector. The timeline shows a notable increase in employee and client exposures during September 2025 and March-April 2026. Given the high volume of data breaches and active infostealer activity targeting authentication services, this exposure poses a critical risk to the organization and its users. The prevalence of infostealer malware and the reliance on combolist sources suggest a need for immediate remediation focused on credential hygiene, multi-factor authentication enforcement, and enhanced monitoring for suspicious login activity. Prioritizing the protection of the feng.com passport system and associated user data is paramount. The geographical distribution indicates a significant presence in China, the United States, and Egypt, which should inform targeted security awareness campaigns and incident response efforts.