unblocked.li Domain Breach Exposure Report

The domain unblocked.li has been associated with 136 client-related events over the period of July 2025 to June 2026. Of these, 108 events are classified as historical data breaches, and 28 are active infostealer logs. Malware families identified include LummaC2 (39.3%), Redline (7.1%), Vidar (7.1%), and Raccoon (3.6%). The targeted services primarily involve login pages and index pages for various file-sharing and torrent sites, with a notable concentration on eztv.unblocked.li/login/. The operating systems most frequently observed are Windows 11 Pro (32.1%) and Windows 11 (10.7%). The data breaches are exclusively linked to combolist sources, indicating a high likelihood of credential stuffing attacks against these services. The primary risk stems from the extensive historical data breaches and active infostealer logs, suggesting a significant exposure of client credentials. The prevalence of LummaC2, a known infostealer, further elevates this risk. Remediation efforts should focus on securing the targeted services, particularly those related to login and user account management, and investigating the source of the combolists to understand the full scope of the credential compromise. Given the nature of the targeted services (file sharing, torrents), the most appropriate industry sector is Retail & E-commerce, as these often involve user accounts for content access and management.