Back

skyscrapercity.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain skyscrapercity.com exhibits a high-risk score of 90, primarily driven by a significant volume of historical data breaches (26,599 events) and active infostealer logs (2,620 events) over the past year. The majority of these events are linked to combolist sources, suggesting compromised credentials. While employee-related events are relatively low (88), client-related events are extremely high (29,131), indicating a broad impact on users. Malware families such as Redline, LummaC2, and Rhadamanthys are prevalent, often associated with credential theft. The timeline shows a notable increase in both employee and client events in March 2026, with a subsequent decline. The geographical distribution indicates a higher concentration of events originating from India, Brazil, and Vietnam. The primary concern is the widespread exposure of client credentials through data breaches and infostealer activity, potentially leading to account takeovers and further downstream compromise. The prevalence of credential stuffing tools and the targeting of specific site registration pages suggest attackers are actively attempting to exploit these exposed credentials. Remediation should focus on immediate credential reset campaigns for affected users, enhanced monitoring for suspicious login activity, and a review of authentication mechanisms to prevent credential stuffing attacks.

Total Events

29,219
credential exposure events

Employee Affected Events

88
account email domain = skyscrapercity.com

Client Affected Events

29,131
service target = skyscrapercity.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
10,0006,6673,3330
peak month 8,475
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events2,620
Share9%
Data breaches
Events26,599
Share91%
Infostealer logs (9%)
2,620events
Data breaches (91%)
26,599events

88 compromised employee accounts pose an infrastructure risk, while 29,131 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender119
Windows Defender.15
Windows Defender ESET Security.2
Windows Defender Panda Dome2
Windows Defender McAfee.2
AhnLab V3 Internet Security 9.01
Windows Defender Kaspersky Internet Security.1
Windows Defender Kaspersky Anti-Virus1
McAfee1

Malware Families Distribution

Distribution of Active Stealer Strains

Redline455
LummaC2358
Rhadamanthys182
Vidar179
Acreed160
Blank Grabber108
StealC55
RisePro55
X-Files33

Top Login URLs

Top exposed services found in the event results

  1. 1skyscrapercity.com3,802
  2. 2https://www.skyscrapercity.com2,745
  3. 3https://skyscrapercity.com2,436
  4. 4www.skyscrapercity.com1,797
  5. 5https://www.skyscrapercity.com/register/900
  6. 6https://www.skyscrapercity.com/863
  7. 7skyscrapercity.com/register.php735
  8. 8https://www.skyscrapercity.com/register.php726
  9. 9https://www.skyscrapercity.com/showthread.php705
  10. 10skyscrapercity.com/692

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

India
Events228
Brazil
Events110
Vietnam
Events105
United States
Events76
Indonesia
Events76
Spain
Events72
Pakistan
Events66

Country Breakdown

  1. 1India228
  2. 2Brazil110
  3. 3Vietnam105
  4. 4Bosnia & Herzegovina83
  5. 5United States76
  6. 6Indonesia76
  7. 7Spain72
  8. 8Pakistan66

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 11213
Windows 10 Enterprise x64184
Windows 11 24H2 build 26100 (64 Bit)101
Windows 10 Pro99
Windows 1098

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
26,592
Combolist pools
7
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.