Back

nametests.com Domain Breach Exposure Report

Risk Score

Medium Risk

Moderate exposure in standard leak repositories.

AI Findings Summary

Elevated

The domain nametests.com has experienced a significant exposure event, primarily driven by 94 historical data breaches and 9 active infostealer logs. The data breaches, comprising 91.3% of the total events, suggest a large-scale compromise of client information. The infostealer activity, accounting for 8.7% of events, indicates ongoing threats potentially targeting credentials or sensitive data. The timeline shows a surge in client-related events in March 2026, with 35 occurrences, and a consistent presence of infostealer activity throughout the observed period, particularly involving the Rhadamanthys malware family. The primary risk stems from the extensive historical data breaches, which could lead to identity theft, financial fraud, and reputational damage for affected clients. The active infostealer logs, linked to malware like Rhadamanthys, LummaC2, and Redline, pose an immediate threat of credential harvesting and further data exfiltration. Remediation efforts should focus on investigating the root cause of the historical data breaches, enhancing security controls to prevent future compromises, and actively monitoring for and mitigating ongoing infostealer threats targeting client accounts, especially those related to Facebook login endpoints and the hippobackend service.

Total Events

103
credential exposure events

Employee Affected Events

0
account email domain = nametests.com

Client Affected Events

103
service target = nametests.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
4027130
peak month 35
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events9
Share9%
Data breaches
Events94
Share91%
Infostealer logs (9%)
9events
Data breaches (91%)
94events

0 compromised employee accounts pose an infrastructure risk, while 103 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender1

Malware Families Distribution

Distribution of Active Stealer Strains

Rhadamanthys7
LummaC21
Redline1

Top Login URLs

Top exposed services found in the event results

  1. 1pt.nametests.com/accounts/facebook/login/9
  2. 2https://pt.nametests.com9
  3. 3https://fr.nametests.com/8
  4. 4http://pt.nametests.com/accounts/facebook/login/6
  5. 5hippobackend.nametests.com/admin/login5
  6. 6pt.nametests.com/accounts/facebook/login5
  7. 7pt.nametests.com5
  8. 8https://hippobackend.nametests.com4
  9. 9http://pt.nametests.com/accounts/facebook/login4
  10. 10https://hippobackend.nametests.com/admin/login/4

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

Belgium
Events6
Ecuador
Events1
Mexico
Events1
Indonesia
Events1

Country Breakdown

  1. 1Belgium6
  2. 2Ecuador1
  3. 3Mexico1
  4. 4Indonesia1

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 11 24H2 build 26100 (64 Bit)7
Windows 10 Enterprise x641
Windows 11 Home (10.0.26100) x641

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
94
Combolist pools
0
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.