← All coverage

t.me

Disclosed Sep 29, 2026

Records
974,144
Files
1
Added
Oct 7, 2026

A credential stuffing / infostealer log compilation distributed via the 'White Cloud' Telegram channel. Contains approximately 975,000 URL:login:password combos harvested from stealer malware across hundreds of different websites including Amazon, Netflix, Google, Epic Games, Discord, LinkedIn, and many others. No single target company — this is a multi-site credential log aggregation typical of infostealer botnet output.

Data found in this dataset

Email

Search this dataset

Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.

Source files

Expand any file to inspect its column headers and the field each maps to.

975K URL-LOGIN-PASS 29.09.2026 WHITE CLOUD.txt
2 columns974,144 rows

File structure

Source columnMapped fieldConfidence
1emailhigh
combo identifier column — values parse as email addresses
2passwordhigh
combo secret column — value adjacent to the email identifier

Notes: Heuristic auto-detection: credential combo list