Back

vodlocker.com Domain Breach Exposure Report

Risk Score

Medium Risk

Moderate exposure in standard leak repositories.

AI Findings Summary

Elevated

The telemetry indicates a significant exposure of client credentials, with 2,267 historical data breaches and 189 active infostealer logs observed over the reporting period. The primary source of these breaches appears to be combolist sources, suggesting compromised credential reuse across various services. Malware families such as Redline, LummaC2, and Rhadamanthys are prevalent, indicating active credential harvesting operations targeting users. The affected domain, vodlocker.com, is directly implicated in these events, with numerous targeted service entries. The geographical distribution shows a notable concentration of affected users in Brazil, the United Kingdom, and the United States. Given the high volume of historical data breaches and active infostealer activity, this exposure presents a critical risk. The prevalence of infostealer malware targeting credential harvesting necessitates immediate attention to prevent further compromise and potential downstream impacts. Remediation efforts should focus on credential hygiene, including enforcing strong, unique passwords, implementing multi-factor authentication for all client accounts, and actively monitoring for and revoking compromised credentials associated with the observed malware families and combolist sources.

Total Events

2,456
credential exposure events

Employee Affected Events

0
account email domain = vodlocker.com

Client Affected Events

2,456
service target = vodlocker.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
8005332670
peak month 750
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events189
Share8%
Data breaches
Events2,267
Share92%
Infostealer logs (8%)
189events
Data breaches (92%)
2,267events

0 compromised employee accounts pose an infrastructure risk, while 2,456 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender1

Malware Families Distribution

Distribution of Active Stealer Strains

Redline40
LummaC234
Rhadamanthys33
Acreed22
RisePro8
Millenium4
Vidar4
Remus3
X-Files2

Top Login URLs

Top exposed services found in the event results

  1. 1vodlocker.com/469
  2. 2vodlocker.com447
  3. 3http://vodlocker.com/406
  4. 4https://vodlocker.com397
  5. 5https://vodlocker.com/221
  6. 6http://vodlocker.com161
  7. 7http://vodlocker.com/login.html121
  8. 8vodlocker.com/login.html113
  9. 9https://vodlocker.com/login.html54
  10. 10vodlocker.com/free28816.html10

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

Brazil
Events17
United Kingdom
Events15
United States
Events13
South Africa
Events13
Philippines
Events9
Pakistan
Events8
Algeria
Events8
Egypt
Events7

Country Breakdown

  1. 1Brazil17
  2. 2United Kingdom15
  3. 3United States13
  4. 4South Africa13
  5. 5Philippines9
  6. 6Pakistan8
  7. 7Algeria8
  8. 8Egypt7

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 10 Enterprise x6418
Windows 1018
Windows 11 (Build 26200) (64 Bit)15
Windows 10 Home x6413
Windows 11 24H2 build 26100 (64 Bit)12

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
2,267
Combolist pools
0
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.