Darkside by District 4 Labs

Overview

Darkside by District 4 Labs provides breach records and stealer log data for many entity types, including emails, domains, usernames, phone numbers, and crypto addresses.

Malfors uses Darkside to enrich entities in your graph with matching breach and stealer log records where they are available.

This helps you see whether an entity appears in exposed data and gives you pivots for related identifiers, accounts, or infrastructure.

Configure

1. Create a Darkside account and generate your API token.
2. In Malfors, open Enrichments → Darkside → Add Token.
3. Paste your token into the field and save.
4. Darkside enrichments are now available.