Combo Database Trading β€” Sourcing, Cleaning, DeDuping & Selling Credential Databases

Blacksec

Administrator
Staff member
πŸ“Š COMBO DATABASE TRADING πŸ“ŠSourcing β€’ Cleaning β€’ DeDuping β€’ Checking β€’ Selling β€’ Pricing Guide

⚑ COMBO MASTER: Combo database trading is a business. Source from breaches, clean and dedupe, check for validity, and sell to the right buyers at the right price. This guide covers the entire pipeline from raw breach dump to premium combo list.

SOURCING COMBOS
Code:
1. Public Breach Sources:
   - Have I Been Pwned (API β€” confirms breaches exist)
   - DeHashed (paid search, $5/search)
   - IntelX (darknet search engine)
   - Telegram channels (@leaked_databases, @breach_db)
   - Public forums (RaidForums archive, BreachForums, Dread)
   - Data leaks on GitHub (search for "leaked", "database", "dump")

2. Private Sources:
   - Other combo traders (buyer-seller relationships)
   - Forum marketplace (BlackSec, exploit.in)
   - Direct from hackers (breach resellers)
   - Telegram private groups (invite only)

3. Scraping:
   - Pastebin scraping (β€” paste sites, ghosts, etc.)
   - Telegram channel scraping
   - Forum scraping for posted combos

4. Quality over quantity:
   - A clean, deduped 1M Spotify combo set sells for more than a raw 10M general dump
   - Focus on: fresh breaches (< 6 months), specific services, validated combos

CLEANING & DEDUPING
Code:
Essential cleaning pipeline:

Step 1: Remove invalid lines
  grep -E "^.{3,}@.{3,}\..{2,}:" input.txt > step1.txt
  # Removes anything without a valid email pattern

Step 2: Remove duplicates (keep first)
  awk -F: '!seen[$1]++' step1.txt > step2.txt
  # Dedupes by email (first field)

Step 3: Remove empty passwords
  awk -F: '$2 !~ /^[[:space:]]*$/' step2.txt > step3.txt
  # Removes lines where password is empty

Step 4: Remove garbage patterns
  grep -vi -E "^.*@(example|test|mailinator|yopmail|guerrillamail)\.com:" step3.txt > step4.txt
  grep -vi -E "^(admin|root|test|info|noreply|support|postmaster)@" step4.txt > step5.txt

Step 5: Password quality filtering
  # Remove obviously weak passwords
  grep -vi -E ":password$|:123456$|:123456789$|:qwerty$|:letmein$" step5.txt > clean.txt

Final count:
  wc -l raw_dump.txt   # Original: 12,000,000
  wc -l clean.txt      # Clean: 8,500,000 (29% removed)

Tools for large datasets:
  - Linux sort/uniq/awk: works for files under 50GB
  - DupeGuru: GUI deduplication tool
  - Custom Python/pandas scripts for complex dedup
  - For files over 50GB: use Hadoop or Spark

CHECKING ([HIT RATES)
Code:
Before selling, check sample for hit rates:
  1. Take 10K sample from cleaned combo set
  2. Check with OpenBullet 2 using appropriate config
  3. Record: hit count, hit type (premium/free/expired)
  4. Estimate overall hit rate
  5. Price accordingly

Typical hit rates by service (fresh combos):
  Spotify: 18-25%  β†’ Premium price ($8-15/1K)
  Netflix: 12-20%  β†’ Premium price
  Disney+: 22-35%  β†’ Premium price (highest hit rate)
  NordVPN: 20-30%  β†’ Good price
  Steam: 5-10%     β†’ Lower price
  Instagram: 10-18% β†’ Medium price
  Gmail: 20-30%    β†’ Good price
  General (mixed): 5-15% β†’ Lower price

PRICING GUIDE
QualityHit RatePrice per 1KPrice per 1M
Premium (checked, deduped)20%+$10-25$500-2,000
Good (cleaned, deduped)10-20%$5-10$200-500
Standard (cleaned only)5-10%$2-5$50-200
Raw (uncleaned dump)Unknown$0.50-2$20-50

SELLING COMBOS
Code:
Where to sell:
  - BlackSec Marketplace (verified vendors only)
  - Telegram channels (private, invite-only)
  - Discord servers (require vetting)
  - Exploit.in / darknet forums

What buyers want (2026 trends):
  - Email:pass combo with cookie exports (Session tokens)
  - Combo + proxy + config bundle ("checker-ready")
  - Service-specific combos (not mixed dumps)
  - Fresh combos (< 30 days old)
  - Combos with high hit rates (> 15%)
  - GEO-specific (US-only combos sell for 3x global)

Creating a listing:
  [WTS] 5M Spotify Premium Combos β€” 22% Hit Rate β€” Fresh July 2026
  
  Details:
  - 5,000,000 email:password combos
  - Cleaned + deduped + checked (500/5K sample)
  - 22% confirmed hit rate
  - US/EU/Global split available
  - Format: .txt (ready for OB2)
  - Price: $800 (BTC/XMR)
  - Sample: 1K free on request
  - Escrow preferred

Payment: BTC or XMR only.
Delivery: Via MEGA link with decryption key in DM after payment.

πŸ“Š Source clean, sell fair, build reputation. Repeat buyers pay premium. πŸ“Š
 
Top