In addition to what sandy-is-fine said, the most widely leaked device private key was entirely killed off this past week. For all services and platforms. It doesn't work for anything as of a few days ago.
It is unlikely that less widely leaked L1 private keys have trickled down to the sellers on this forum.
The same goes for the L3 cdm keys. It is unlikely that anyone who has extracted the rsa key from the browser cdm and also provisioned a device private key from it, would be selling on this forum.
It is not impossible, just unlikely. Require proof only in the form of content keys for content that was released 04/24 or later. Do not consider any video demo of some software in action as any kind of proof.