Inside the dellnet 1.com Combolist: How 2,572 Passwords Leaked

HEROIC analysts reviewed a combolist uploaded to Telegram in June 2026 containing 2,572 records tied to the dellnet 1.com domain. Each record combines an email address with a plaintext password and the URL of the login page it works on.

Why This Is Dangerous

A file like this hands an attacker everything needed to attempt a login without any extra work. The password sits in plain text right next to the matching email and web address, so there is no cracking involved, just a direct attempt to get into the account.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated login URLs

Why This Matters

Combolists like this one are the backbone of credential stuffing attacks, where automated tools test the same email and password pair across many different websites at once. If any of these 2,572 people reused their password on a banking site, email account, or social media platform, those accounts are exposed by extension, along with the risk of identity theft and financial fraud.

How Combolists Work

A combolist is exactly what it sounds like, a combined list of usernames or emails and passwords pulled from multiple sources, including old breaches, phishing pages, and malware infections. These lists get organized by domain or theme, like the dellnet 1.com records here, and then shared or sold, often through channels like Telegram, without the original source of every record being made clear.

Check If You Are Affected

If you have ever used an email address tied to dellnet 1.com, or reused a password across multiple sites, it is worth checking your exposure. HEROIC's free breach scanner searches more than 400 billion leaked records to show you what has surfaced. Run a scan and change any password you recognize.