t.me
Disclosed Sep 29, 2026
Records
2,018,009
Files
1
Added
Oct 7, 2026
A stealer log compilation distributed via the 'White Cloud' Telegram channel, containing approximately 2 million URL:login:password credential triplets harvested from infostealer malware. The data spans hundreds of different websites and services globally, including social media, gaming, streaming, banking, and e-commerce platforms. The file is formatted as URL:username/email:password and is typical of credential-stuffing databases assembled from infostealer botnet logs.
Data found in this dataset
Email
Search this dataset
Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.
Source files
Expand any file to inspect its column headers and the field each maps to.
2M URL-LOGIN-PASS 29.09.2026 WHITE CLOUD.txt2 columns2,018,009 rows
File structure
| Source column | Mapped field | Confidence |
|---|---|---|
| 1 | high | |
| combo identifier column — values parse as email addresses | ||
| 2 | password | high |
| combo secret column — value adjacent to the email identifier | ||
Notes: Heuristic auto-detection: credential combo list