Back

nhaccuatui.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain nhaccuatui.com has experienced a significant exposure event, with 168,005 total events recorded between July 2025 and June 2026. The majority of these events, 145,855 (86.8%), are classified as historical data breaches, while 22,150 (13.2%) are active infostealer logs. The data indicates a substantial impact on clients, with 167,791 affected, and a smaller number of employees, 214, impacted. The primary malware families associated with these events are Redline, LummaC2, and Rhadamanthys, all known for their credential-stealing capabilities. The exposure is heavily concentrated in Vietnam, with 12,679 events originating from the country. The leak repository classification suggests that 99.9% of the exposed data comes from "Combolist sources," indicating a high likelihood of credential stuffing attacks leveraging previously compromised credentials.

Total Events

168,005
credential exposure events

Employee Affected Events

214
account email domain = nhaccuatui.com

Client Affected Events

167,791
service target = nhaccuatui.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
50,00033,33316,6670
peak month 46,014
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events22,150
Share13%
Data breaches
Events145,855
Share87%
Infostealer logs (13%)
22,150events
Data breaches (87%)
145,855events

214 compromised employee accounts pose an infrastructure risk, while 167,791 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender160
Windows Defender.15
Windows Defender Kaspersky Kaspersky Free.4
Avast Norton4
Bkav Pro Internet Security4
Windows Defender AVG Antivirus.4
Windows Defender Avast Antivirus.1
Windows Defender McAfee.1

Malware Families Distribution

Distribution of Active Stealer Strains

Redline4,366
LummaC23,975
Rhadamanthys2,115
Vidar1,357
Acreed1,157
StealC745
RisePro261
Remus168
Millenium121

Top Login URLs

Top exposed services found in the event results

  1. 1nhaccuatui.com14,707
  2. 2https://www.nhaccuatui.com10,456
  3. 3https://nhaccuatui.com10,111
  4. 4https://www.nhaccuatui.com/9,027
  5. 5www.nhaccuatui.com7,177
  6. 6https://id.nhaccuatui.com/dang-ky-nhanh-nct7,095
  7. 7nhaccuatui.com/6,196
  8. 8www.nhaccuatui.com/4,889
  9. 9http://www.nhaccuatui.com/4,036
  10. 10id.nhaccuatui.com/dang-ky-nhanh-nct3,801

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

Vietnam
Events12,679
United States
Events362
Venezuela
Events78
Japan
Events54
Singapore
Events43
South Korea
Events38
Canada
Events38

Country Breakdown

  1. 1Vietnam12,679
  2. 2United States362
  3. 3Venezuela78
  4. 4Japan54
  5. 5Hong Kong SAR China49
  6. 6Singapore43
  7. 7South Korea38
  8. 8Canada38

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

Cisco (AnyConnect)1

Operating System Distribution

Distribution of compromised endpoint builds

Windows 10 Enterprise x642,244
Windows 10 Pro1,175
Windows 10 Pro (10.0.19045) x641,154
Windows 11995
Windows 10 22H2 build 19045 (64 Bit)857

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
145,757
Combolist pools
98
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.