Data Sources & Legal Disclaimer

Last Updated: January 2026

1. Our Role (Aggregator, Not Creator)

Rasad operates strictly as a Data Breach Search Engine.

  • We do NOT hack, steal, or exfiltrate data from private databases.
  • We do NOT buy data from ransomware gangs to fund criminal activity.
  • We DO aggregate, normalize, and index data that has already been leaked publicly on the internet (OSINT), Dark Web forums, and Telegram channels.

Our mission is purely defensive: to empower users with the information they need to secure their accounts before criminals can exploit them.

2. Sources of Data

Our index is built from:

  • Public Dumps: Databases circulated freely in cybersecurity communities.
  • Paste Sites: Text dumps found on anonymous sharing platforms.
  • Stealer Logs: Compromised credentials harvested by malware and released publicly.
  • Combo Lists: Aggregated lists of "User:Password" pairs circulating in the wild.

Disclaimer: The presence of data in our index does not imply we verify its accuracy. We present the data "as found" to help victims identify their exposure.

3. Ethical Handling of Sensitive Data

Passwords

  • We store passwords exactly as they appear in the leak (often hashed). We do not attempt to crack, decrypt, or reverse-engineer hashes. Our goal is matching, not exploitation.

No "Full Dumps" for Sale

  • We strictly refuse to sell raw, bulk databases to individuals. Access is limited to querying specific identifiers (e.g., "Is my email leaked?").

4. Compliance & Jurisdiction

Rasad operates in compliance with:

  • Palestinian Cybercrime Law: We respect local regulations regarding digital safety and privacy.
  • GDPR Principles: While we operate from Palestine, we align with GDPR concepts by providing users the "Right to Erasure" and "Right to Know."

5. Data Removal (Takedowns)

If you are a verified owner of a domain or email address and wish to remove your records from our public search results:

  • We respect your Right to be Forgotten.
  • Removing data from Rasad does not remove it from the original hackers or the Dark Web.

6. Contact for Legal and Privacy Matters

To submit a request, contact: