KurtXTCloud ULP Compilation 2026
Disclosed Sep 21, 2026
A credential stuffing compilation (ULP - URL:Login:Password format) distributed via the Telegram channel @kurtxtcloud. Contains approximately thousands of plaintext credential triplets spanning hundreds of different websites globally, including major platforms like Facebook, Amazon, Netflix, Discord, Steam, Instagram, Google, and many regional services across Brazil, Indonesia, Vietnam, Egypt, and other countries. This is not a single-target breach but a multi-source credential compilation aggregated and distributed by a threat actor.
Data found in this dataset
Search this dataset
Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.
Source files
Expand any file to inspect its column headers and the field each maps to.
@kurtxtcloud - pure quality ulp free - 21.09.2026.txt2 columns2,867,121 rows
File structure
| Source column | Mapped field | Confidence |
|---|---|---|
| 1 | high | |
| combo identifier column — values parse as email addresses | ||
| 2 | password | high |
| combo secret column — value adjacent to the email identifier | ||
Notes: Heuristic auto-detection: credential combo list