Dark Web Intel: HOTMAIL TEST COMBO Exposes 1,705 Login Pairs

Dark Web Intel: The HOTMAIL TEST COMBO File Exposes 1,705 Login Pairs

In May 2026, HEROIC threat analysts identified a combolist circulating on Telegram under the name HOTMAIL TEST COMBO. The file exposed 1,705 records of Hotmail and Outlook style email addresses paired with plaintext passwords and the URLs each login was used on, packaged as a ready to use test batch for anyone looking to check which credentials still work.

Why This Combolist Is Dangerous

A file labeled TEST COMBO usually means someone is using it to check which email and password pairs still log in successfully before reselling the confirmed hits. Because the passwords are stored in plaintext, an attacker can read the exact password next to the exact email address and try logging into that Hotmail or Outlook account immediately, with no extra effort required.

What Was Exposed in the HOTMAIL TEST COMBO File

• Email addresses
• Plaintext passwords
• URLs linking each credential to the site it was used on

Why This Matters for the 1,705 Accounts Involved

A compromised email account is often the master key to a person's other accounts, since email is used to reset passwords for banking, shopping, and social media. If any of these 1,705 credentials work, an attacker can pivot from a single mail account into credential stuffing, account takeover, identity theft, or financial fraud across everything tied to that email.

How Combolists Like This Get Tested and Sold

A combolist is a compiled file of username or email and password pairs, usually gathered from earlier breaches, stealer malware infections, or manual collection. Before selling a list, distributors often run it through checking tools to separate working logins from dead ones, then advertise the confirmed batch on Telegram channels where buyers pay for verified access. Once a checked combolist like this one circulates, it tends to be copied and resold well beyond its original source.

Check If You Are Affected

If you want to know whether your email address is part of the HOTMAIL TEST COMBO file or any other breach, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records. Run a scan to see your exposure and get clear steps to secure your accounts.