The 60K MIX Domains 3.13 Dump Contains Exactly 69,542 Login Pairs

HEROIC analysts found a combolist titled "60K MIX Domains 3.13," uploaded by a Telegram user and dated January 18, 2023. The file contains exactly 69,542 records pairing email addresses with plaintext passwords, along with the URLs of the sites those logins were originally used on.

Why the 60K MIX Domains 3.13 Dump Is Dangerous

The "mix domains" naming suggests this combolist pulls credentials from many different websites rather than a single company, which means the 69,542 accounts inside could belong to anything from email providers to online shops. Because the passwords are stored in plaintext, an attacker can try each pair immediately, and the attached URLs tell them exactly which site to target first.

What Was Exposed in This Dump

• Email addresses
• Plaintext passwords
• URLs tied to each set of credentials

Why This Matters for the 69,542 Accounts Involved

If your email is among these 69,542 records, an attacker already has a working password for at least one of your accounts. Since so many people reuse the same password across multiple sites, that single credential pair can be used for credential stuffing attempts against your email, banking, or social media logins, potentially leading to account takeover, identity theft, or financial fraud.

How This Combolist Was Built

A combolist compiles login credentials, usually collected through malware, phishing, or earlier breaches, into a single file of email and password pairs. A "mix domains" list like this one draws from many different sites rather than one target, which is why the URLs inside point to a wide range of services. These mixed lists are common on Telegram, where they are traded and tested by attackers looking for accounts with working, reused passwords.

Check If You Are Affected

With 69,542 records in this dump alone, checking your exposure only takes a moment. HEROIC's free breach scanner searches your email against a database of more than 400 billion leaked records, including combolists like 60K MIX Domains 3.13, so you can find out if you are affected and secure your accounts before someone else uses your credentials.