Home Help Me Help You Transparency Report
Follow @_hyp3ri0n

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community that is a useful tool for security researchers.

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

If you're an old school scylla.sh user, you might notice a few changes. Specifically there is no cryptominer and there are no advertisements at all for anything. Frankly, I got sick of getting accused of doing this for money when the truth is that this costs me a decent amount. So you may choose to support scylla.sh or not, it will be 100% ad-free from now on and you are welcome here :) (unless you're using this for malicious purposes then I suggest you f*** off as I will cooperate with law enforcement).

Support Scylla

Scylla needs your help! To make this project sustainable it unfortunately needs some help from the commmunity. I am glad to put my personal time and money into this project, but I could use some help on the hosting costs. If you would consider buying me a metaphorical coffee it would greatly help in supporting scylla. Everyone says this, but I mean it when I say that even a 5 dollar donation helps. If everyone donated 5 dollars that visited the site, I could make this project much more sustainable and continue to improve and update it. ALL donations go to improving and maintaining scylla.

That said, you're welcome to not donate and use the site anyway :). The goal here is to ruin a really shitty economy that sells your data.

Since many have asked (thank you btw) about direct donations, you can send Bitcoin to 3MpFsXKEpxSGzibCTxnceyZ6i3jSQDLzf3 or Monero to 4ADfkWQYwZ1Bix5W1tYrEX8hUC32z3ejeHa88Zc8GRfnhfhy2mgmqMLHdiAp9nXh4pDYnwquHvmddZ3nWhngyLzt3Q8jcxx and may also donate with paypal with this button

Support ScyllaSupport Scylla

*Search is in beta, please report bugs to the scylla github repo

emailpasshashusernameipdomainpassword
osimon..dol0288ck@list.runullnullnullnullCollectionsUhAOIWG
lakiraalston25nullnullnullnullCollectionsstarz2
nullb9fef5decaf8465613163ee2951efc63juanjo_ms@hotmail.esnullnullbadoo.comnull
rahul9427125283@hotmail.comnullnullnullnullCollectionsvaidehi10
Rube75nullnullnullnullCollectionsraiders
alexvas-n@rambler.runullnullnullnullCollections28031983s
dzjaduh@mail.runullnullnullnullCollections80989.8644a123
felixmyciek@hotmail.denullnullnullnullCollectionsPatrick91
164247430nullnullnullnulllinkedin.comxxx
allpro206@gmail.com977fcac1f02739e681a191d3c59ccb97efff6305nullnullnulldropbox.comnull
fabyana_90_@hotmail.itnullnullnullnullCollectionsmiraleca
askaslastena@gs.uznullnullnullnullCollections!nastya!
ryanb914@yahoo.comnullnullnullnullCollectionsryguy41917
belkheiri0444@epost.denullnullnullnullCollectionsconniew1
yankeenation@yahoo.comnullnullnullnullCollections63mn7cgm
jamal_prd@yahoo.comnullnullnullnullCollectionsILUVALI1
gemellina_46@hotmail.itnullnullnullnullCollectionsceqikena
panda11772008@126.omnullnullnullnullCollectionsxingjiw1
evillittlebrother@ymail.comnullnullnullnullCollectionscaddy67
mail06742062@yandex.uznullnullnullnullCollectionsQSDN7Yhw
dimacn@yahoo.comnullnullnullnullCollections108108
gramarnier@yahoo.comnullnullnullnulllinkedin.comxxx
ddc12@naver.comnullnullnullnullCollectionscyw0812
betul-oz@hotmail.comnullnullnullnullCollectionsrynegelu
null9e77d526aa6b62401875029e2a4fba55heldcosta@hotmail.comnullnullbadoo.comnull
null40b70c44b203736f53469cffb83e693bxiomygp80@hotmail.comnullnullbadoo.comnull
giovannarodgers88@live.co.uknullnullnullnullCollectionsqwerty123q
uosipova.sone_1989c@list.runullnullnullnullCollectionsBImqmY
chantal.mena@hotmail.comnullnullnullnullCollectionsrenata15
nurzhan.isabekov@rambler.runullnullnullnullCollectionsnurzhan.isabekoa
pmmstudio@live.senullnullnullnullCollections730727pm
kojemyak@rambler.runullnullnullnullCollectionszahnarzt
amieferz_03174@gmail.comnullnullnullnullCollections9007171259
rondor_away@yahoo.comnullnullnullnullCollections@M0nkeys
andrea_art@hotmail.com$2a$08$As5b5ij7tDS9aBBVSadQvuvVH3zw12k0rON4lPWZ2Rg6PSZSgykmKnullnullnulldropbox.comnull
figureofspeech360@yahoo.comnullnullnullnullCollectionsasshole33
hemdawg91@aol.comnullnullnullnullCollectionsskeeter555
shoosh1008@r0.runullnullnullnullCollectionsnjkmrjns
andy.hohnhold@yahoo.denullnullnullnullCollectionsCurrywurst
aderry@upc.ienullnullnullnullCollectionsalannah1
cliffsage13@yahoo.comnullnullnullnullCollectionsCcs071161
razsers@gmail.comnullnullHose Delgado194.249.197.20000webhost.comlambadaMilano90
alstra-s@mail.runullnullnullnullCollections0s7v1e97t7
yamsta@hotmail.comnullnullnullnullCollectionsthahung1
jogantic@yahoo.dknullnullnullnullCollectionsudontknow
INSERT INTO `ibf_members` (`member_id`, `name`, `member_group_id`, `email`, `joined`, `ip_address`, `posts`, `title`, `allow_admin_mails`, `time_offset`, `skin`, `warn_level`, `warn_lastwarn`, `language`, `last_post`, `restrict_post`, `view_sigs`, `view_img`, `bday_day`, `bday_month`, `bday_year`, `msg_count_new`, `msg_count_total`, `msg_count_reset`, `msg_show_notification`, `misc`, `last_visit`, `last_activity`, `dst_in_use`, `coppa_user`, `mod_posts`, `auto_track`, `temp_ban`, `login_anonymous`, `ignored_users`, `mgroup_others`, `org_perm_id`, `member_login_key`, `member_login_key_expire`, `gallery_perms`, `has_blog`, `members_auto_dst`, `members_cache`, `members_disable_pm`, `members_display_name`, `members_seo_name`, `members_created_remote`, `has_gallery`, `members_profile_views`, `members_l_display_name`, `members_l_username`, `failed_logins`, `failed_login_count`, `mood`, `pm_counter`, `members_pass_hash`, `members_pass_salt`, `member_banned`, `member_uploader`, `members_bitoptions`, `fb_uid`, `fb_emailhash`, `fb_lastsync`, `members_day_posts`, `live_id`, `twitter_id`, `twitter_token`, `twitter_secret`, `notification_cnt`, `tc_lastsync`, `fb_session`, `fb_token`, `ips_mobile_token`, `unacknowledged_warnings`, `blogs_recache`, `ipsconnect_id`, `ipsconnect_revalidate_url`) VALUES ('201746', 'HOIGHPREEDO', '1', 'petya.parall@gmail.com', '1361440647', '188.237.177.167', '0', '', '1', '0', '', '', '0', '1', '', '0', '1', '1', '0', '0', '0', '0', '0', '0', '1', '', '1361965961', '1362711848', '0', '0', '0', 'daily', '0', '0&1', 'anullnullnullnullCollections0
ricchisapiano@hotmail.co.uk$2a$08$wBJAOaYYrsmYal7eHzDk9Ow1vYmgtsAU51am1HUFlch9JM4D/Jce2nullnullnulldropbox.comnull
pablo_futboloko@hotmail.comnullnullnullnullCollectionschanito8
car_thick_2000@yahoo.comnullnullnullnullCollectionsq5uvocLF0Q==
jonathanroberts95@epost.denullnullnullnullCollectionshellogoodbye
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_lucene_query&size=100&start=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
  {
    "fields": {
      "domain": "Collections",
      "email": "nikitapetrov4@hotmail.com",
      "password": "ybrbnf4"
    },
    "id": "01c0726ebff03503ed554c013340a6eb"
  },
  {
    "fields": {
      "domain": "Collections",
      "email": "has_00_n@hotmail.com",
      "password": "357753"
    },
    "id": "01c07b5a3df965275d4e28a5df62220d"
  },
  {
    "fields": {
      "domain": "Collections",
      "email": "montereyjim@hotmail.com",
      "password": "mrnaizka"
    },
    "id": "01c082d83c1bbaf18e45995cb2e273f4"
  },
  {
    "fields": {
      "domain": "Collections",
      "email": "asasins2000@mail.ru",
      "password": "89262301010c"
    },
    "id": "01c09d34763354ce6dd31492bf7c0244"
  },
  {
    "fields": {
      "domain": "Collections",
      "email": "d.o.cm.u.rt.o.n.r.a@gmail.com",
      "password": "xj7ler7x6t"
    },
    "id": "01c0a96dce4aae3651d7d5aac9c42796"
  }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website or any ads.

- _hyp3ri0n

Donations