ShadowMap

Dark Web Exposure for dr.dk

Credentials, devices and data found in dark web stealer logs & breaches
70
Exposure level: High
dr.dk scores 70/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 19 days ago Last 90 days +67% 14% reuse a top-10 password
Employee exposure
corporate accounts — @dr.dk
214
leaked credentials · 70 compromised devices
Top exposed employee accounts
***@dr.dk122
***@dr.dk87
drexk***@dr.dk21
***@dr.dk20
//sts.dr.dk/adfs/ls/ drexk***@dr.dk18
Where staff accounts were caught
https24
sts.dr.dk10
egencia.com9
billetto.dk8
com.facebook.katana8
Customer exposure
stolen logins for dr.dk
6,345
leaked credentials · 819 compromised devices
Top exposed customer accounts
mr.kennypeter***@gmail.com55
murtada.alsh***@outlook.com51
mik***@mzh.dk43
steenl***@get2net.dk43
oskarwil***@gmail.com35
Most targeted services
login.dr.dk4,721
www.dr.dk1,027
drbilleder.dr.dk51
sts.dr.dk13
apxpack.lx.dr.dk6
6,540
Exposed Credentials
831
Compromised Devices
0
Credit Cards
3
Crypto Wallets
183
Auth Tokens
317,415
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Dropbox5

Most common passwords 14% reuse a top-10 password

Sk***t377
DR***6971
Su***0.68
Hu***WQ67
cs***mY66
#F***#765
Oh***6960
Es***vq58
Al***r156
Ma***9956

Stolen sessions (active cookies that can bypass MFA)

youtube.com8,303
google.com4,146
bing.com3,544
adnxs.com3,155
criteo.com3,147
pubmatic.com2,958

Financial, crypto & app tokens

Crypto wallets
metamask2
phantom1
App / session tokens
Google152
Discord31

Where devices were compromised (by country)

DK2

Browsers & apps affected

Google Chrome (Default)45
Browser/Logins/Chrome_Default[94c8efc2].txt13
Microsoft Edge (Default)13
Chrome [Default]11
android:facebook.com8
Edge [Default]7

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.