Back

kanald.com.tr Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain kanald.com.tr has experienced a significant exposure event with a risk score of 95, primarily driven by 6,412 historical data breaches and 905 active infostealer logs. The data indicates a substantial compromise affecting 1,063 employees and 6,254 clients. The timeline shows a surge in client-related events in March 2026, alongside a notable increase in employee-related events in September 2025 and January 2026. Malware analysis reveals a prevalence of infostealers such as Redline, Rhadamanthys, and LummaC2, suggesting a focus on credential harvesting. The majority of leaked data originates from combolist sources, indicating compromised credentials. Given the high risk score and the large volume of compromised employee and client data, this incident warrants immediate attention. The prevalence of infostealer malware targeting login endpoints suggests a direct threat to account security and potential for further lateral movement or data exfiltration. Prioritization should focus on incident response, credential reset for all affected employees and clients, and a thorough review of authentication and access controls. The primary sector for this domain is likely Retail & E-commerce, given the nature of the targeted services and the volume of client data involved.

Total Events

7,317
credential exposure events

Employee Affected Events

1,063
account email domain = kanald.com.tr

Client Affected Events

6,254
service target = kanald.com.tr

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
2,0001,3336670
peak month 1,766
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events905
Share12%
Data breaches
Events6,412
Share88%
Infostealer logs (12%)
905events
Data breaches (88%)
6,412events

1,063 compromised employee accounts pose an infrastructure risk, while 6,254 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender12
Malwarebytes1

Malware Families Distribution

Distribution of Active Stealer Strains

Redline182
Rhadamanthys128
LummaC2102
Vidar65
RisePro41
Acreed32
StealC22
Raccoon5
Remus3

Top Login URLs

Top exposed services found in the event results

  1. 1kanald.com.tr650
  2. 2https://www.kanald.com.tr/account/login604
  3. 3https://kanald.com.tr465
  4. 4https://www.kanald.com.tr364
  5. 5kanald.com.tr/account/login310
  6. 6www.kanald.com.tr285
  7. 7https://www.kanald.com.tr/account/register274
  8. 8www.kanald.com.tr/account/login269
  9. 9kanald.com.tr/account/register182
  10. 10https://www.kanald.com.tr/149

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

Türkiye
Events428
United States
Events12
Canada
Events10
Austria
Events8
Bangladesh
Events7
Chile
Events6
Japan
Events6
Netherlands
Events5

Country Breakdown

  1. 1Türkiye428
  2. 2United States12
  3. 3Canada10
  4. 4Austria8
  5. 5Bangladesh7
  6. 6Chile6
  7. 7Japan6
  8. 8Netherlands5

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

Microsoft14
TeamViewer9

Operating System Distribution

Distribution of compromised endpoint builds

Windows 10 Enterprise x6461
Windows 11 24H2 build 26100 (64 Bit)61
Windows 1155
Windows 10 22H2 build 19045 (64 Bit)48
Windows 10 Pro41

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
6,088
Combolist pools
324
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.