ShadowMap

Dark Web Exposure for finbox.in

Credentials, devices and data found in dark web stealer logs & breaches
58
Exposure level: High
finbox.in scores 58/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 19 days ago Last 90 days -1% 31% reuse a top-10 password
Employee exposure
corporate accounts — @finbox.in
60
leaked credentials · 41 compromised devices
Top exposed employee accounts
paypoint***@finbox.in37
business_admin_buddyl***@finbox.in25
***@finbox.in8
hitesh.aggar***@finbox.in5
sunil.he***@finbox.in3
Where staff accounts were caught
platform.finbox.in42
platform-beta.finbox.in8
payroll.razorpay.com4
tallysolutions.com2
ec2-13-127-85-195.ap-south-1.compute.amazonaws.com1
Customer exposure
stolen logins for finbox.in
2,022
leaked credentials · 431 compromised devices
Top exposed customer accounts
khaleelgulam278
sonuzafa***@gmail.com77
mansooralimansooriatt***@gmail.com73
see864566
suman897250
Most targeted services
bankconnectclient.finbox.in1,332
platform.finbox.in257
lendingweb.finbox.in234
platform-beta.finbox.in83
adityabirla-platform.finbox.in66
2,032
Exposed Credentials
434
Compromised Devices
0
Credit Cards
0
Crypto Wallets
65
Auth Tokens
82,193
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Most common passwords 31% reuse a top-10 password

69***3277
Kh***2377
At***2673
ir***8645
61***6943
91***6743
LA***2443
Bu***3442
99***5438
Si***2838

Stolen sessions (active cookies that can bypass MFA)

youtube.com3,182
google.com1,992
pubmatic.com1,083
google.co.in1,077
bing.com883
adnxs.com808

Financial, crypto & app tokens

App / session tokens
Google61
Telegram4

Where devices were compromised (by country)

GB1
IN1

Browsers & apps affected

Google Chrome (Default)21
Google Chrome (Profile 7)10
Edge [Default]5
Google Chrome (Profile 3)3
Microsoft Edge (Default)3
Google Chrome (Profile 2)2

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.