Back

torrentdownloads.me Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain torrentdownloads.me is associated with a high-risk score of 89, primarily driven by a significant volume of historical data breaches (86.3%) and active infostealer logs (13.7%). Over the reporting period, 25,123 data breach events and 3,991 infostealer events were observed. Notably, employee exposure to infostealers increased in March and April 2026, with 4 and 17 employee events respectively, alongside a surge in client-related events. The most prevalent malware families associated with these events are LummaC2, Redline, and Rhadamanthys, all known for credential theft. The data suggests a strong correlation with "Combolist sources" within leak repositories, indicating compromised credentials are being aggregated and potentially sold or reused. The high volume of data breaches and infostealer activity targeting clients and employees, coupled with the presence of prevalent credential-stealing malware, indicates a substantial risk of account compromise and further data exfiltration. The observed increase in employee-related infostealer events warrants immediate attention. Remediation efforts should focus on enhancing credential hygiene, implementing multi-factor authentication across all services, and conducting thorough security awareness training for employees, particularly concerning phishing and credential harvesting tactics. Monitoring for further spikes in employee-related events and investigating the source of the "Combolist sources" are critical next steps.

Total Events

29,114
credential exposure events

Employee Affected Events

34
account email domain = torrentdownloads.me

Client Affected Events

29,080
service target = torrentdownloads.me

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
8,0005,3332,6670
peak month 7,136
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events3,991
Share14%
Data breaches
Events25,123
Share86%
Infostealer logs (14%)
3,991events
Data breaches (86%)
25,123events

34 compromised employee accounts pose an infrastructure risk, while 29,080 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender16

Malware Families Distribution

Distribution of Active Stealer Strains

LummaC2800
Redline768
Rhadamanthys283
Vidar272
Acreed196
RisePro100
StealC83
Raccoon46
Remus25

Top Login URLs

Top exposed services found in the event results

  1. 1torrentdownloads.me1,598
  2. 2https://www.torrentdownloads.me1,395
  3. 3https://torrentdownloads.me1,063
  4. 4www.torrentdownloads.me760
  5. 5https://www.torrentdownloads.me/717
  6. 6torrentdownloads.me/393
  7. 7torrentdownloads.me/register/368
  8. 8https://www.torrentdownloads.me/register/334
  9. 9http://www.torrentdownloads.me/register/265
  10. 10torrentdownloads.me/register249

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

Pakistan
Events193
India
Events190
United States
Events174
Egypt
Events148
Bangladesh
Events111
Saudi Arabia
Events67
Indonesia
Events64
France
Events62

Country Breakdown

  1. 1Pakistan193
  2. 2India190
  3. 3United States174
  4. 4Egypt148
  5. 5Bangladesh111
  6. 6Saudi Arabia67
  7. 7Indonesia64
  8. 8France62

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 10 Enterprise x64324
Windows 11244
Windows 10 Pro (10.0.19045) x64240
Windows 10 Pro214
Windows 10 Home x64138

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
25,122
Combolist pools
1
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.