bugatti.lolBreach corpora
28 sourcesCurated datasets from known credential-stuffing incidents and public leak disclosures. Matched on email, username and password hash.
Sources
Where the data comes from
Results are aggregated across four categories. Every hit is tagged with its originating source so you can judge freshness and provenance.
Infostealer logs
11 sourcesOutput from commodity stealer malware, indexed by infected machine so repeated targets, domains and vault contents can be spotted.
Social and web
24 sourcesPublic profiles, handles and posts across social networks, developer platforms, marketplaces and gaming services.
Public registries
7 sourcesWHOIS and DNS records, certificate transparency logs, IP geolocation, ASN data and open corporate registries.
Transparency by design. bugatti.lol returns records that were already publicly indexed; it does not generate new private data. Every result includes a source link and the date the record was observed, so provenance is never ambiguous.
One query across all of them
Normalised, deduplicated and correlated — so you spend time investigating, not juggling tabs.