Breach / leak-forum tracker

A directory of criminal forums and dark markets (community-maintained deepdarkCTI list) plus a curated set of notable breach/leak forums. This is intelligence about these venues — names, status, public OSINT coverage, and historical status deltas.

No forum content, credentials, or breach data is fetched, parsed, or linked here. Curated entries link to public OSINT coverage (DarkWebInformer search), not to the forums themselves.

Recent status changes

Hourly diff against the deepdarkCTI snapshot. First-observations, removals, and status transitions only — no-op snapshots are dropped. Persisted by the scheduled Worker, not reconstructed on each read.

OSINT coverage

Headlines from 8 public cybersecurity news sites (DarkWebInformer, DataBreaches.net, BleepingComputer, The Record, Threatpost, HackRead, SecurityWeek, CyberScoop) ranked by keyword density and recency. No forum links, no leak dumps — just the press.

Forum mentions in OSINT

Tight filter — only headlines that name a specific leak forum (BreachForums, Leakbase, Cracked, XSS, Dread, Sinisterly, Exploit, etc.). Useful for spotting law-enforcement seizures and successor-site chatter.