Hotmail Fresh B4_Jx Logins Quietly Appeared on the Dark Web

HEROIC's threat intelligence team identified a small combolist named "Hotmail Fresh B4_Jx" circulating quietly on Telegram, dated April 7, 2026. The file contains 176 records pairing email addresses with plaintext passwords and the URLs those logins belong to.

Why the Hotmail Fresh B4_Jx Leak Is Dangerous

Small combolists like this one often move under the radar precisely because of their size, but the danger to each individual included is the same as in a much larger leak. Because the passwords are stored in plaintext, an attacker can try each pair against other websites immediately.

What Was Exposed in the Hotmail Fresh B4_Jx Combolist

• Email addresses
• Plaintext passwords
• URLs of the websites or services the credentials belong to

Why This Combolist Matters

Even a list of 176 records can lead to serious consequences for the people on it, especially since Hotmail accounts are often used as recovery addresses for other services. If any of these passwords are reused, an attacker could take over an email inbox and use it to reset passwords across other accounts.

How a Combolist Like This Works

A combolist pairs email or username and password combinations, usually pulled from older breaches, stealer logs, or previous credential-stuffing runs, into a file. The word "fresh" suggests these credentials were recently checked and confirmed to still work, which is why sellers on Telegram often move small, verified batches like this one quietly before advertising them more widely.

Check If You Are Affected

HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including combolists like Hotmail Fresh B4_Jx. If you find a match, change that password immediately, particularly if it is tied to your primary email account.