Dark Web Exposure for login.do
Credentials, devices and data found in dark web stealer logs & breaches
72
Exposure level: High
login.do scores 72/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Employee exposure
corporate accounts — @login.do
68,172
leaked credentials · 891 compromised devices
Top exposed employee accounts
9443/authenticationendpoint/login.do547
(auth.api.sonyentertainmentnetwork.com/login.do)309
8080/login.do296
www.cultureland.co.kr/signin/login.do162
login.oracle.com/oaam_server/login.do139
Where staff accounts were caught
auth.senasofiaplus.edu.co23,966
https21,498
http2,534
c1,989
services.umsa.bo577
Customer exposure
stolen logins for login.do
390
leaked credentials · 90 compromised devices
Top exposed customer accounts
daya_197238
kuni01257
0070485265
nzdes***@live.com4
wilyam694
Most targeted services
services.irctc.co.in.cgi-bin.bv60.dll.irctc.services.login.do39
tvtorrents.com.login.do4
auth.cablevision.com.ar.saml.authenticationendpoint.login.do3
foresttrip.go.kr.com.login.do3
it.wikiloc.com.wikiloc.login.do3
68,562
Exposed Credentials
893
Compromised Devices
0
Credit Cards
0
Crypto Wallets
7
Auth Tokens
30,691
Stolen Cookies
Exposure over time (credentials leaked per month)
2024-012026-07
Corporate SaaS & shadow-IT exposed (employee logins to third-party services)
Most common passwords 3% reuse a top-10 password
Stolen sessions (active cookies that can bypass MFA)
Financial, crypto & app tokens
App / session tokens
Where devices were compromised (by country)
Browsers & apps affected
Stealer malware families seen
RedLine
Related companies
Explore
Check your own exposure →
Free dark web & attack-surface check by ShadowMap
Figures are aggregate counts derived from dark web stealer logs and public breach data.
Data is indicative and updated periodically.