Telegram User Uploaded a freenet.am Combolist With 3,348 Logins

freenet.am Combolist: 3,348 Email and Password Records Leaked

On 10-Jun-2026, HEROIC analysts identified a combolist referencing "freenet.am" uploaded by a Telegram user. The file contained 3,348 records, each pairing an email address with a plaintext password and the URL of the account it belongs to.

Why This Is Dangerous

Because every password in this list is stored in plaintext and already matched to its login URL, an attacker does not have to crack, decode, or search for anything. They can take the file as-is and start attempting logins on the exact accounts it points to.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs identifying the login page for each account

Why This Matters

A list of 3,348 ready-to-use credentials is a practical size for credential-stuffing attacks, where automated tools feed each email and password pair into other websites to see where else it works. Anyone in this file who reused their password on a different account is exposed to account takeover, identity theft, or financial fraud until that password is changed.

How Combolists Work

A combolist compiles email-and-password pairs, often referencing the domain or service they were captured from, in this case "freenet.am", and packages them for distribution on Telegram channels or dark web forums. Buyers use the reference in the name to quickly judge whether the credentials fit the accounts they are trying to target before purchasing or downloading the full list.

Check If You Are Affected

If your email address is among the 3,348 records in this freenet.am combolist, waiting to find out is not a safe option. HEROIC's free breach scanner checks your address against a database of more than 400 billion leaked records so you can confirm your exposure and update any reused passwords right away.