ShadowMap

Dark Web Exposure for d2h.com

Credentials, devices and data found in dark web stealer logs & breaches
79
Exposure level: High
d2h.com scores 79/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days -3% 4% reuse a top-10 password
Employee exposure
corporate accounts — @d2h.com
142
leaked credentials · 65 compromised devices
Top exposed employee accounts
//d2h.com/login loletsengf682***@gmail.com44
//d2h.com/login.php mosa***@gmail.com20
//d2h.com/login.php shailjha9***@gmail.com18
dhanshree.vilan***@d2h.com13
pankaj.sha***@d2h.com7
Where staff accounts were caught
https98
grammarly.com8
in.linkedin.com7
www.grammarly.com5
mob.citruspay.com3
Customer exposure
stolen logins for d2h.com
63,474
leaked credentials · 1,225 compromised devices
Top exposed customer accounts
8892198986299
9910904449234
i***@swapdesign.co.in179
deepak.vasave1***@gmail.com118
997173292988
Most targeted services
www.d2h.com36,961
pcs.d2h.com6,317
myaccount.d2h.com2,806
mms.d2h.com894
phoenix.d2h.com699
63,614
Exposed Credentials
1,229
Compromised Devices
0
Credit Cards
1
Crypto Wallets
502
Auth Tokens
786,591
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

LinkedIn7
Fortinet2

Most common passwords 4% reuse a top-10 password

pr***@3159
12***89129
GU***54125
Sm***20116
Av***oo107
la***23105
na***23105
00***30102
50***07101
U2***c=101

Stolen sessions (active cookies that can bypass MFA)

youtube.com24,758
google.com14,831
pubmatic.com8,659
adnxs.com8,233
bing.com7,726
google.co.in7,491

Financial, crypto & app tokens

Crypto wallets
electrum1
App / session tokens
Google469
Telegram18
Discord15

Where devices were compromised (by country)

IN3

Browsers & apps affected

Google Chrome (Default)108
Microsoft Edge (Default)80
Chrome [Default]24
Google Chrome (Profile 2)16
Browser/Logins/Edge_Default[75cfc6fb].txt14
Browser/Logins/Chrome_Default[f4a00ef5].txt12

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.