Zerooq.com (Combos.vip) Credential Market 2022 Database Leak Spam Data List
In December 2022, an internal product repository and customer database originating from Zerooq.com (operating alongside combos.vip), a dark web vendor catering to credential-stuffing and automated account-takeover threat actors, was leaked on BreachForums.
Exposed Data Types
4- Email addresses
- Passwords
- Usernames
- Account credentials
About This Record
The exposed archive, totaling 4.05 GB compressed (9.35 GB uncompressed), contains structured domain-split lists across hundreds of email providers (including Yahoo, T-Online, Windows Live, university domains, and corporate mail hosts) as well as the platform's backend rposj.sql schema dump. Forensic inspection identifies approximately 42,500,000 valid email-password credential pairings.
Rather than reflecting a direct compromise of a single legitimate corporate entity, this breach represents an aggregated credential warehouse gathered from infostealer malware and previous disclosures. Individuals exposed in this leak face severe credential-stuffing risks and should ensure unique passwords with multi-factor authentication are enforced across all accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
