This is a no-longer-maintained Google Sheets resource collection compiled by AaronCTI, with its updated version hosted at OSINTPORTAL.COM. It categorizes links to cyber threat intelligence and open source intelligence resources for lookups including email addresses, IP addresses, social media profiles, and data breaches.
Directory
Search results
Published directory entries matching your search.
Narrative podcast documenting breaches, underground actors, darknet cases and security investigations.
Searchable timeline of publicly reported breaches with affected organizations, dates and data types.
DeadStack aggregates recent technology and business news stories, each with a headline and links to coverage from other outlets. Items cover topics such as stablecoins, semiconductor investment reviews, funding rounds, data breaches and corporate deals, with some entries including short summaries.
Email Breach Analysis is a free service that checks whether an email address appears in hacked data from known database breaches. It returns a summary of information that may be at risk, critical identity alerts, and a relative exposure rating.
Have I Been Pwned is a data breach search and notification service. It lets users check whether an email address appears in known data breaches and lists instances where data was found in paste records. It also offers an MCP server that connects AI agents to breach, password, paste, domain and stealer log data.
Identity Theft Resource Center database documenting publicly reported US data compromises.
A tag archive on Krebs on Security collecting posts about dark web topics. Entries cover the 2019 takedown of the Wall Street Market dark web bazaar, the disappearance of the Evolution Market in 2015, and stolen credit card shops. Each entry carries a publication date and reader comments.
Security journalism site covering cybercrime, breaches, fraud, malware, and online threats.
Leak Lookup is a data breach search engine for searching database leaks and dumps. It offers username, email and IP address lookups across thousands of breaches to help track credentials compromised in the wild. A hash API provides hash-cracking capabilities and an API key is required to make requests.
Leakedpassword.com searches across multiple data breaches to check whether a password has been compromised. It also provides an API for use in signup processes to validate users' passwords, drawing its data from Have I Been Pwned and requiring no authentication.
Mozilla service that checks email addresses against known breaches and explains protective steps.
Scattered Secrets is a service that lets users search data breaches to see whether their password has been compromised. Its site describes how cybercriminals collect stealer logs and crack passwords to take over accounts, and presents the service as protection against account takeovers. A free account is offered.
Command-line tool for checking which known breaches may be linked to a target email address.