2023 New Year’s Special 🍾 Our New Year’s Special is live! 🍾🥂 1-month license for € 50! This offer is valid for a week until January 7, 2023. Full access (same as Researcher license). This equals to a 76% discount. You can order it here: https://intelx.io/order 💸 2022 for Intelligence X 2022 was an incredible
Starting with December 1, 2022 we are changing license tiers and adding new tiers. This is essentially a price increase. Orders placed before that date are not affected. Here are the main changes: Why the increase In the last 3 years we have not changed our prices. However, since then a lot has changed: New
At Intelligence X we categorize data sources into buckets. Buckets can be used as filters and to broadly identify the source of individual search results. For example, the bucket “Darknet Tor” indicates the result origins from some a Tor hidden service (.onion domain) and was collected by our Tor crawler. Buckets have human readable names
We just added support for an additional 152 top-level domains (TLDs), increasing the support to 511 TLDs in total. Support means that you can search for those domains across intelx.io and APIs, and internally that our backend supports processing them. While you can start searching for them immediately, it will take some time until our
Earlier today at 11:24 The Guardian Journalist Shaun Walker posted the security procedure and the security token used to pass makeshift checkpoints in Ukraine related to the Russian Ukrainian war: This is a reminder to journalists – and the public – to take OPSEC (operations security) seriously and not endanger people on the ground. Posting
We stand with Ukraine 🇺🇦 Intelligence X commends the brave Ukrainian soldiers. 🇺🇦 Free access for the Ukrainian Government We have whitelisted the domain gov.ua – all accounts signed up on intelx.io with that email ending have full access to 100 billion records. This includes access to our Identity Portal which allows users to quickly
December 2021: Christmas Special 🎄🎁 Merry Christmas! To celebrate, we are offering a special 1-month license for € 50. This offer is valid for a week. It provides the same type of access as the Pro license that costs € 2000 /year. To take advantage of this Christmas special, go to https://intelx.io/order. License Changes in
Co-Founder of QuoScient GmbH and QuoLab Technologies Inc., former Global Head of Malware Research and Response at Deutsche Bank joins Intelligence X’s newly created advisory board as the company is gaining momentum. “We are very happy to welcome Fabien today to our advisory board at a time when we keep expanding on our services beyond
June 2021: New Usenet data category We added the new data category Usenet. It contains historical and current data from Usenet, which is “a worldwide distributed discussion system”. Today, Usenet is mostly used for piracy. This new category stores currently 209,469,453 selectors and is expected to grow substantially. Improved inline statistics We have improved the
Intelligence X supports Peernet – Founder’s Statement I am excited to announce Peernet, a decentralized network that allows sharing of data freely without censorship and restrictions. Here is the pitch deck: https://peernet.org/dl/Peernet%20Deck.pdf Peernet is making quick progress from its inception as I am finalizing the whitepaper and developing the core library. I would like to
February 2021: Launch of the European Internet Archive The European Internet Archive just launched! 🎉🥳 ➡ https://archive.eu/ 225 TLDs added to the list of web crawling We have added 225 top-level domains (TLDs) to the list of web crawling. Find the full list and how we are categorizing them in this blog post. Our dataset
We have added the new category “Bot Logs”. It contains data collected by and leaked from viruses such as Azorult. Such data is often sold on marketplaces such as the Genesis Market. We decided to index such data into this new category to help filtering out relevant results. You can find this new category in
We are excited to announce that we just added 225 top-level domains (TLDs) to the list of web crawling! Below is the full list. The domain count per TLD represents the domains registered according to DomainTools. We group multiple TLDs into “buckets” to make it manageable – you can select these buckets in the Advanced
January 2021: Capitol Hill Riots Archive, New Features Our dataset contains now 30 billion records and grows by +3 billion every month. Last year has been incredible for us. We are growing by any metric – all organically. Searches are up 113% Q-on-Q and our user base is growing sustainably at 18% month-on-month. Capitol Hill
We are archiving media from todays Capitol Hill riots. Follow our Twitter account for updates. We have archived the Capitol Hill riots media here: https://intelx.io/?did=814b39fe-ad98-45a1-9f44-0346bc9f9b94 Use the “Tree View” tab to see all pictures and videos. The FTP server stores now 200 GB (about 4000 files). Note: Some files contain graphic content.
December 2020: Telegram channel Subscribe to our new Telegram channel at: https://t.me/intelxio New Telegram subscribers receive a free 3-day Professional license code! We will post frequent updates and technical background info to this channel. 🏛 Open Government We are archiving all .GOV and .MIL websites. Any changes will be preserved, any alterations detected! Read the
Today at 13:14 we have received the following Content Removal Request from Ledger regarding this search result. […] By making this database public, the privacy of over 1 million individuals is violated, which places them at risk of, amongst other things, phishing attacks. We respectfully request that you expeditiously remove the thread. Our client is
Open government is the governing doctrine which holds that citizens have the right to access the documents and proceedings of the government to allow for effective public oversight. Wikipedia After the recent firing of Christopher Krebs, the 1st director of the Cybersecurity and Infrastructure Security Agency (CISA), we decided to leap into action and preserve
🎙️ Join the webinar with Media Sonar Tomorrow at 2 p.m. EST (= 20:00 CET) we are hosting a webinar with Media Sonar! Sign up here: https://mediasonar.com/intelligencex-osint-cyber-investigation/ The title is “How Analysts Use OSINT and Dark Web for Cyber Investigations”. Our CEO will talk about how you can use Intelligence X, and will give some
October 2020: Hunter Biden, Maltego Transform v4, Decentralized TLDs 🥳 It has been 2 years since the launch of Intelligence X! At this point we would like to thank our users & customers for their trust and we look forward to the future. -Intelligence X Team Make sure to follow us on Twitter for the
Disclaimer: Intelligence X is politically neutral. This investigation is based on public information (open source intelligence). tl;dr: It appears that the email addresses appearing in the alleged email are accurate. This does not validate nor refute the content of said email. The New York Post published today the two articles “Hunter Biden emails show leveraging
We want to give some insight into top-level domains (TLDs) supported by Intelligence X. Even though there are a total of 1,508 available TLDs (full list by IANA), we choose to only support certain TLDs in order to prevent spam, false positives, and maintain a high quality data set. Validation of top-level domains appears in
August 2020: Latest News & Statistics Public API keys are retired We have retired public API keys. All 3rd party tools and integrations must use per-user API keys. Note: This also affects SpiderFoot users. We have updated our SDK to reflect that change. You can find your personal API key here: https://intelx.io/account?tab=developer In related news,
At Intelligence X, we value quality over quantity. Our goal is continuous improvement, sustainability, and stability. As we cross the mark of 25 billion records with 100+ TB of storage, it is time to set sail for 100 billion records. Counting records A single record is an extracted selector (search term) like “test.com”. A search
August 2020: Recap of 3rd-party OSINT tools and integrations We are listing all approved 3rd-party integrations here: https://intelx.io/integrations h8mail: “an email OSINT and breach hunting tool using different breach and reconnaissance services” Maltego Transform subfinder: “subdomain discovery tool that discovers valid subdomains for websites by using passive online sources” theHarvester: “The tool gathers emails, names,
tl;dr: Nothing ever good comes out of Tor. We are going to block Tor IP addresses from signup, login, and search starting on July 5, 2020. Our reasons are rooted in: Tor Hidden Services Are a Failed Technology, Harming Children, Dissidents and Journalists. Read this blog post by lawfare. According to our own investigation, Tor
We just released a Maltego Transform for Intelligence X. The installation instructions are here: https://github.com/IntelligenceX/SDK/tree/master/Maltego%20Transform Maltego is “software used for open-source intelligence and forensics, developed by Maltego Technologies”. It can visualize information in a graph format.
We are publishing information about a user who attempted to defraud us. As outlined in previous blog posts and tweets, we are going to aggressively publish the information about anyone trying to attack, hack or defraud us. The person tried to use alleged stolen credit cards to purchase an Intelligence X subscription. Email addresses and
We launched a new product: “Identity Portal”! It allows users to find all lines in a text where a search term appears, and to download a list of leaked accounts under a specific domain or email address. This product is exclusively available on request to companies and governments. If you are interested, please contact us!
June 2020: New Phonebook service! 🎉 We just launched a free new service: https://phonebook.cz It lists all email addresses, subdomains, and URLs for the input domain. Try it out – it’s free! It uses the same dataset as intelx.io – which is 20 billion records. There is an existing phonebook feature at intelx.io since its
May 2020: New dorks website, Tor, DDoS test and a Europol takedown Our dataset continues to grow significantly: 17,660,962,195 selectors In the past few months, we have invested in 200+ TB of enterprise storage which allows us to scale up data collection even more. As for the public web, we are currently crawling these TLDs:
On Sunday, May 10, 2020, we will DDoS our own website, intelx.io. We will live tweet and update this blog post with any developments and the outcome. The attack will be executed in the same fashion as an actual attack: we’ll do some research, then pay a shady DDoS provider in Bitcoin (and hope they
Tor .onion domains are the hashes of public keys. Generally, they look random, but it is possible for am Tor hidden service operator to generate onion domains that start with a human readable part such as “silkroad7rn2puhj.onion”. Those are called “vanity onion addresses” and there are tools like Shallot and Eschalot that will create the
Certain actors spam Tor by creating many duplicate websites under different .onion domains and then linking them to each other. The cost of doing that is pretty low, considering that all you need is creating a new public key pair (the onion domain is the hash of the public key). In theory anyone can create
Repost from https://www.lawfareblog.com/tor-hidden-services-are-failed-technology-harming-children-dissidents-and-journalists for increased visibility. By Brian Levine, Brian Lynn Friday, January 17, 2020, 8:27 AM. Copyright © 2020 The Lawfare Institute. A recent series of New York Times articles reported on the deeply disturbing amount of child sexual exploitation material that is available on the Internet. The articles discuss personal accounts of children who have been targeted, how
April 2020: New Python API wrapper and Command Line Interface We have teamed up with zer0pwn to develop a new Python API wrapper and Command Line Interface. It is released in our SDK: https://github.com/IntelligenceX/SDK/tree/master/Python For details read this blog post: https://blog.intelx.io/2020/04/13/new-python-api-wrapper-and-command-line-interface/ Features of the new Python code: Query search results based on a selector Filter
We have teamed up with @zer0pwn to develop a completely rewritten Python API wrapper and Command Line Interface. 👉🏼 https://github.com/IntelligenceX/SDK/tree/master/Python To install the command line tool run these commands (requires Python 3, tested against latest 3.8.2): git clone https://github.com/IntelligenceX/SDK pip3 install SDK/Python In order to see all results, you should specify your API key via
March 2020 Updates How we prepared for the current global situation We have ordered and deployed 180 TB worth of enterprise storage to be prepared for upcoming price increases and shortages of hard disks. We are reading reports that warn of upcoming delivery delays due to disruptions in the supply chain. We tweeted a picture
“The Death Master File (DMF) is a computer database file made available by the United States Social Security Administration since 1980″ according to Wikipedia. It is available here https://ladmf.ntis.gov/ but costs $2,930.00 anually. The file has since been posted on the internet for free, including here: http://ssdmf.info/download.html November 30, 2011 http://cancelthesefunerals.com/ May 31, 2013 https://archive.org/details/DeathMasterFile May 31, 2013 This file can
On December 11, 2019 we have received 31,866 HTTP requests from the IP 81.171.107.57. Below are few sample log entries: 81.171.107.57 – – [11/Dec/2019:13:52:37 +0000] “POST /login HTTP/1.1” 200 7448 81.171.107.57 – – [11/Dec/2019:13:52:37 +0000] “POST /login HTTP/1.1” 200 7443 81.171.107.57 – – [11/Dec/2019:13:52:37 +0000] “POST /login HTTP/1.1” 200 7447 81.171.107.57 – – [11/Dec/2019:13:52:37 +0000]
March 2020: New Data Categories Stay up to date with us on Twitter: https://twitter.com/_IntelligenceX Private Data Leaks We have revised our license system and launched a new data category exclusively for paid Professional users: Private Data Leaks. Trial accounts will see a preview, but you must be a paid member to fully access the category.
We were again under DDoS attack on February 11, 2020. We received 177,261 HTTP requests in a time span of 2 hours from 2,682 unique IPv4s. As always, this attack was not successful (it had no impact) and was only noticed due to looking into visitor statistics. The second spike (February 27, 2020) was due
We have revised our license system! Check out our updated product page https://intelx.io/product for the details on available licenses and their permissions. Here’s what we published that was not online before: Detailed list of features available for each license List of buckets that are available in full and as preview by each license Pricing scheme
We have just removed the X-Score from the user interface. It was not properly explained and does not bring enough value to merit keeping it. X-Score is an internal algorithm which ranks results when you select the “Most Relevant” sort order (which is the default). The X-Score number represents how important each individual result might
February 2020: WeLeakInfo Seizure & Other News 🕵🏻 OSINT Tools: Google Analytics ID Reverse Lookup We have added a Google Analytics ID reverse lookup tab: https://intelx.io/tools?tab=analytics It will redirect to 3rd party sites that look up a Google Analytics ID and show websites that use the same analytics ID for Google Analytics. This can be
Our last transparency report was published some time ago – it’s time for an update! This report includes information about content removal requests and government orders since the last transparency report. Results are deduplicated. We have received 44 content removal requests (note that one report may indicate multiple reasons) and complied with all of them:
We were under a DDoS attack on January 26, 2020. We received 4,935,580 HTTP requests in 3 minutes from the 2 IPs 149.202.101.151 and 54.38.23.181. It was the second DDoS attack – the last one was on September 19, 2019. You can see the spike clearly in the monthly usage statistics below. The attack was
The domain weleakinfo.com was seized yesterday by the FBI. The website shows a takedown notice and shows the logos of NCA, Politie, Police Service Northern Ireland, Department of Justice and Bundeskriminalamt. The note writes: This domain has been seizedThe domain for WELEAKINFO has been seized by the Federal Bureau of Investigation pursuant to a seizure
January 2020: OSINT Tool Update & Latest News 🕵🏻 OSINT Tools: Reverse Hash Lookup We have added a reverse hash lookup: https://intelx.io/tools?tab=hash The lookup takes as input a hash of type MD5, SHA1, SHA256, or SHA512. It then redirects the user to 3rd party sites which perform the reverse lookup. Potentially, it can be used
We are constantly indexing the latest whois data for our whois category. “Whois” data contains information about domain ownership. We recently indexed the whois data for October, November, and December 2019 which resulted in 21,168,724 selectors. We analyzed a small sample set (1 day, 2019-11-29) and these are the results: 75% of the data is
November 2019: Academia Program and Inline Filters 🎓 Academia Program We are now offering free access to members of schools and universities. Accounts that register on intelx.io with an email address from a school or university get upgraded automatically. We have published a list of supported domains and add new ones on request. You can
Minutes ago (evening of November 21, 2019) we just stopped an unsuccessful login bruteforce attack. The attacker’s email address is primeday@protonmail.com and the IPs used in the attack are 163.172.225.39 (a NordVPN IP), 94.36.97.33 and 87.0.205.119. There were 27,601 login attempts from those IPs before stopped by Intelligence X staff. As clearly stated in our
We have added inline statistics & filters. After searching, you can filter by data source, file type or date. Click on the summary line to expand the full statistics view and then click on either the data source, file type or the date heatmap.
November 2019: Tools and Public Web 🕵🏻 OSINT Tools: New Tabs & Updates We have updated our free OSINT tools: https://intelx.io/tools ✅ New YouTube DataViewer: Shows metadata and thumbnails ✅ New Vehicle Identification Number (VIN) tab ✅ Added 4 sites to Domain search, including crt.sh, Robtex, and Hurricane Electric ✅ Added 3 sites to IP
We released our Go “fileconversion” library here: https://github.com/IntelligenceX/fileconversion It supports converting many file formats to plaintext, and provides other related functions. It was tested on 184+ million files and is used for intelx.io. We are happy to contribute back to the open source community.
October 2019: Russia, Grouping Results, and DDoS attack 🇷🇺 Russia Want to investigate the Russian government? We are helping with a new search category, “Government: Russia”. It indexes data from Russian governmental domains, including: gov.ru – Russian Government mil.ru – Ministry of Defence of the Russian Federation kremlin.ru – Official website of the President of
We just released a new search category “Government: Russia”. It indexes data from Russian governmental domains, including: *.gov.ru – Russian Government *.mil.ru – Ministry of Defence of the Russian Federation kremlin.ru – Official website of the President of Russia fsb.ru – Federal Security Service government.ru – Russian Government supcourt.ru – Supreme Court of Russia cikrf.ru
A new features was just added: Grouping of similar results. This new feature is optional and can be in the Advanced menu -> Settings -> “Group Similar Results” checkbox. Try it out by clicking on this link and scroll down: https://intelx.io/?s=test.com&b=darknet.tor&g=1 If there are many search results, this feature can help to declutter the result
On September 19, 2019, intelx.io was under DDoS attack. 62 unique IPv4s issued 1.259.671 HTTP requests in 20 minutes. The attack was not successful, the service continued to perform normally. Source IPs As per our Terms of Service, we reserve the right to share information about attacks with the public. This is the list of
September 2019: Leaks & Whois Data Two new massive data categories have been added: Public Leaks and Whois. They can be selected in the “Advanced” menu on intelx.io. Our dataset is growing rapidly – we are adding up to 10,000 records per second: Public Leaks The category “Public Leaks” contains public data leaks such as
September 2019: Latest Updates We have two new major features to share: the Tree View and the History tabs. 📂 Tree View The Tree View tab shows related items to a search result. It simplifies the process of discovery and adds context to the search results. As for website results, it will show all other
We just released a major update – virtual folders. For some results, there is a new “Tree View” tab. It shows items that are related either because they are part of one container file, or because the original file was too big and was automatically split into multiple files. To put it simple, the Tree
One of the file formats that does not get much attention are “.DS_Store” files, even though they might be of interest in forensic cases when analyzing hard disks or other folders (including ZIP files) from Mac machines. “.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which
August 2019: Latest Updates 👋 The last newsletter was sent out early July 2019. Since then, we have new features and blog posts to share! Our free OSINT tool suite has been substantially upgraded. 🕵🏻 OSINT Tools: More tabs, more functionality Check out our free OSINT tools at https://intelx.io/tools. The third-party search allows you to
When talking about viruses on the darknet, the focus is usually on malware that can be purchased or rented (which gets increasingly popular with ransomware). There are also viruses that use the darknet for C&C (command & control) purposes. However, this blog post investigates viruses on the darknet websites themselves – which are usually based
We have uploaded all the WikiLeaks data to Intelligence X and created a new category. You do not need an account or license to search through the WikiLeaks data using our site. Try it out here! https://intelx.io/?s=cnn.com&b=leaks.public.wikileaks Source & Challenges Most of the raw data is available via https://file.wikileaks.org/file/ as well as torrents. There are
Welcome to our Newsletter! 👋 Intelligence X is excited to bring you periodic updates about our search engine and related tools. 🕵🏻 New OSINT Tools Recently, we developed free OSINT (Open Source Intelligence) tools! Use them here at: https://intelx.io/tools Intelligence X wants to support the OSINT community by providing these OSINT tools to the public.
Update 6/7/2019: We added a full-screen view (click on the new button next to “Back to result”) as well as a new search bar when clicking on a search result. If you don’t see it, make sure to refresh the website (CTRL + F5) as your browser may have cached the old version. Original 6/3/2019:
We added support for US Social Security Numbers (SSNs)! You can immediately search for them here: https://intelx.io/?s=086-38-5955 Whis this is important Searching at Intelligence X works based on selectors (strong search terms). When you search for something, the system automatically detects suitable selectors and performs a search. Below is the list of supported selectors: Email
A few days ago a new search engine DarkSearch for Tor launched, adding to the mix of other existing search engines out there like Ahmia, Torch, Not Evil, and Haystack – it’s time for a feature comparison! No search engine can cover 100% of the pages due to the nature of Tor. There is no
We have just turned on email verification for all accounts on intelx.io. Existing accounts receive a verification link via email upon login.
We just added native support to Intelligence X for the following data formats: Excel Sheets (.XLS, .XLSX, .ODT) PowerPoint Presentations (.PPTX) Native support means end-to-end support. This ranges from indexing and crawling files of various data sources, to processing them internally and presenting them to the end-user on the frontend intelx.io. Indexing is the process
The North Korean website of the Korea Chonsong Trading Company (at http://www.naenara.com.kp/ko/order/kgf/EN/Index.htm) was infected by the virus, “Virut”. Symantec [1] writes about this malware: W32.Virut is a virus that infects executable files. Some variants also infect ASP, HTML and PHP files. The virus has worm-like behavior and spreads by copying itself to fixed, removable and
Google is working on a new feature called “Signed HTTP Exchanges (SGX)” (note: Google also abbreviates it as “SXG”). According to their website: Signed HTTP Exchanges (SGX), part of an emerging technology called Web Packages is now available in Chrome 73. A Signed HTTP Exchange makes it possible to create “portable” content that can be delivered
Say hello to North Korea’s 3rd internet uplink! The North Korean autonomous system AS131279 just got a new uplink to AS133073 Teleglobal Communication Services Limited – which is assigned to Hong Kong, according to APNIC. According to our information, it went live a few days ago on April 3, 2019 at 16:00 UTC. North Korea
We just added Python code to use the Intelligence X API! You can find the code in the SDK at https://github.com/IntelligenceX/SDK. The code comes with a default API key so you can get started right away. For details on usage please look at the readme file in the SDK. The SDK already has code implementations
North Korea has at least 1 WiFi network! The above screenshot was taken from the app, WiFi Map, which shows WiFis added by users (crowd-sourced). In this case, user “Trevan Baxter” added a WiFi network on December 23, 2018. The app first connects to the WiFi before adding it to the database to make sure
Fairview is a NSA program designed to collect “phone, internet, and e-mail data mainly of foreign countries’ citizens at major cable landing stations and switching stations inside the United States”. It dates back to 1985 [1]. There are various good articles on the subject [2]. As with every mass surveillance program, the basic law of
We want to be transparent from the start about how we handle content removal requests and government orders. The service is governed by the Terms of Service and the Privacy Policy. Content removal requests can be filed here. These are the categories under which we remove content from the search results when reported via content
You can access the new developer tab after logging in. Go to: https://intelx.io/account?tab=developer. The new tab shows useful information for using the Intelligence X API: Your API key API URL The buckets (= data categories) you can access List of all API functions (endpoints) you can access as well as the amount of credits (=
We are excited to announce our new Software Development Kit. It is free and can be used by anyone to integrate Intelligence X into their project. Whether it’s a website, service, or local program, you can use our versatile API to enrich your data and provide additional context. The SDK is published here: https://github.com/IntelligenceX/SDK. It
We have now added another darknet to our index: I2P. It is substantially smaller in terms of hosted sites than its bigger fellow, Tor. To connect via I2P, you’d normally have to download the I2P router which provides an HTTP proxy in order to visit “.i2p” domains (called “eepsites”) from the browser. The I2P software
We just released an important feature: alerts via email. Now, you can automatically receive notifications daily, weekly, or monthly if there are new search results. The alert feature is free for everyone. Sign up at https://intelx.io/signup and then go to the “Alert” tab under “Account”. You can preview the alert and see how it looks
Catalin Cimpanu @zdnet published yesterday an article “Popular Dark Web hosting provider got hacked, 6,500 sites down”. The hosting provider “dhosting4okcs22v.onion” was hacked on November 15, 2018 and all data was apparently deleted. The creator Daniel Winzen was cited: “Unfortunately, all data is lost and per design, there are no backups”, and that 6.500+ dark web
Press release / Vienna / October 10, 2018 Global launch of Intelligence X: First search engine for the darknet goes online Programmer and IT security analyst Peter Kleissner launches Intelligence X – the first search engine that can be used to investigate whether personal or sensitive data have been leaked on the internet. Website available